From f4cff04ef8627a1419ec8433c2bb9839f4a551b4 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Tue, 10 Nov 2015 02:06:02 +0100
Subject: [PATCH] =?UTF-8?q?Task=20#1223=20-=20Emp=C3=AAcher=20acc=C3=A8s?=
 =?UTF-8?q?=20information=20syst=C3=A8me=20#1223=20Remove=20access=20to=20?=
 =?UTF-8?q?Information=20System?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 include/admin_repo.inc.php  |  2 +-
 include/constant.php        |  5 ++++-
 include/lib/config_file.php |  2 ++
 include/lib/user_menu.php   | 22 ++++++++++++++++++----
 4 files changed, 25 insertions(+), 6 deletions(-)

diff --git a/include/admin_repo.inc.php b/include/admin_repo.inc.php
index 3cbf22f44..140a3a4fe 100644
--- a/include/admin_repo.inc.php
+++ b/include/admin_repo.inc.php
@@ -102,7 +102,7 @@ if ($action== 'audit_log')
 /*
  * Display information about current installation
  */
-if ( $action == "info") {
+if ( $action == "info" && SYSINFO_DISPLAY == true) {
     echo "<h2>"._('Variables').":".NOALYSS_INCLUDE.'/config.inc.php </h2>';
     echo '<ul style="list-style:square">';
     echo "<li>". "NOALYSS_HOME".": ".NOALYSS_HOME."</li>";
diff --git a/include/constant.php b/include/constant.php
index 01d789e65..bed4db35a 100644
--- a/include/constant.php
+++ b/include/constant.php
@@ -99,7 +99,10 @@ if ( !defined("SITE_UPDATE"))
 if ( !defined("SITE_UPDATE_PLUGIN"))
     define ("SITE_UPDATE_PLUGIN",'http://www.noalyss.eu/plugin_last_version.txt');
 
-
+// If you don't want that the system information  is accessible
+if ( ! defined ("SYSINFO_DISPLAY")) {
+    define ("SYSINFO_DISPLAY",TRUE);
+}
 define ("DBVERSION",122);
 define ("MONO_DATABASE",25);
 define ("DBVERSIONREPO",16);
diff --git a/include/lib/config_file.php b/include/lib/config_file.php
index 8cf8b698d..c34239271 100644
--- a/include/lib/config_file.php
+++ b/include/lib/config_file.php
@@ -191,6 +191,8 @@ function display_file_config($p_array,$from_setup=1,$p_os=1)
     print ( "// published"."\r\n");
     print ( '// define ("SITE_UPDATE","");'."\r\n");
     print ( '// define ("SITE_UPDATE_PLUGIN","");'."\r\n");
+    print ( '// To allow to access the Info system'."\r\n");
+    print ( '// define ("SYSINFO_DISPLAY",true);'."\r\n");
     print ('?>');
 }
 /*!\brief create the config file
diff --git a/include/lib/user_menu.php b/include/lib/user_menu.php
index 4e8195223..99267554a 100644
--- a/include/lib/user_menu.php
+++ b/include/lib/user_menu.php
@@ -113,22 +113,36 @@ function MenuAdmin()
     }
 	if (!defined("MULTI")||(defined("MULTI")&&MULTI==1))
 	{
-		$item=array (array("admin-noalyss.php?action=user_mgt",_("Utilisateurs"),_('Gestion des utilisateurs'),0),
+		$tmp_item=array (
+                 array("admin-noalyss.php?action=user_mgt",_("Utilisateurs"),_('Gestion des utilisateurs'),0),
                  array("admin-noalyss.php?action=dossier_mgt",_("Dossiers"),_('Gestion des dossiers'),1),
                  array("admin-noalyss.php?action=modele_mgt",_("Modèles"),_('Gestion des modèles'),2),
                  array("admin-noalyss.php?action=restore",_("Restaure"),_("Restaure une base de données"),3),
                  array("admin-noalyss.php?action=upgrade",_("Mise à jour"),_("Mise à jour du système et des bases de données"),5),
                  array("admin-noalyss.php?action=audit_log",_("Audit"),_("Utilisateurs qui se sont connectés"),4),
                  array("admin-noalyss.php?action=info",_("Information système"),('Information à propos de votre installation'),6),
-                 array("login.php",_("Accueil")),
-                 array("logout.php",_("Sortie"))
+                 array("login.php",_("Accueil"),"",7),
+                 array("logout.php",_("Sortie"),"",8)
                 );
+                if ( SYSINFO_DISPLAY == false ) {
+                    $nb_item = count($tmp_item);
+                    for ($i=0;$i<$nb_item;$i++) {
+                        if ($tmp_item[$i][3] <> 6 ) {
+                            $item[]=$tmp_item[$i];
+                        }
+                    }
+                } else {
+                    $item = $tmp_item;
+                }
 	}
 	else
 	{
 		$item=array (array("admin-noalyss.php?action=user_mgt",_("Utilisateurs"),_('Gestion des utilisateurs'),0),
                  array("admin-noalyss.php?action=audit_log",_("Audit"),_("Utilisateurs qui se sont connectés"),4),
-                 array("login.php",_("Accueil"))
+                 array("admin-noalyss.php?action=upgrade",_("Mise à jour"),_("Mise à jour du système et des bases de données"),5),
+                 array("admin-noalyss.php?action=info",_("Information système"),('Information à propos de votre installation'),6),
+                 array("login.php",_("Accueil")),
+                 array("logout.php",_("Sortie"))
                 );
 
 	}