[ Adam Horwitz writes: ]
>
> Does anyone have a fix for version 1.93 that seems to only check
> the -digest list for a match on a GET (as well as others) command? Trying
> to figure out and modify the lookup logic in the script is beyond my coding
> expertise. :-( Here's a section of code...
>
> if ($clean_list ne "") {
> # The list is valid, so now check make sure that it's not a private
> # list, or if it is, that the requester is on the list.
> &get_config($listdir, $clean_list)
> if !&cf_ck_bool($clean_list, '', 1);
>
> if ((&cf_ck_bool($clean_list,"private_get") )
> && ! &is_list_member($reply_to, $listdir, $clean_list)) {
> print REPLY "**** List '$clean_list' is a private list.\n";
> print REPLY "**** Only members of the list can do a 'get'.\n";
> print REPLY "**** You aren't a member of list '$clean_list'.\n";
> return 0;
> }
No literal "-digest" in there I can see. ;-) If $clean_list is the
digest list coming in on the request, then that's the list that will be
checked. Note that the only files available to 'get' are the list
archives, so it's (usually*) impossible for one to 'get' the xyzzy-digest
archives via the xyzzy list.
* The "usually" part involves tricky setups using symlinks to wire the
list-digest archives to the list archive directory. Just don't try
to archive both lists when doing that or you defeat file locking and
scribble all over both archives.
--
Dave Wolfe
References:
|
|