From 26b4f12aae5427cced468d8787d914a8e013cd10 Mon Sep 17 00:00:00 2001
From: GeorgeClark <GeorgeClark@0b4bb1d4-4e5a-0410-9cc4-b2b747904278>
Date: Mon, 21 Nov 2011 17:12:12 +0000
Subject: [PATCH] Item11194: Checker to list unprotected scripts

git-svn-id: http://svn.foswiki.org/branches/Release01x01@13161 0b4bb1d4-4e5a-0410-9cc4-b2b747904278
---
 .../Foswiki/Configure/Checkers/AuthScripts.pm | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/core/lib/Foswiki/Configure/Checkers/AuthScripts.pm b/core/lib/Foswiki/Configure/Checkers/AuthScripts.pm
index 770d180ed3..2472a4794f 100755
--- a/core/lib/Foswiki/Configure/Checkers/AuthScripts.pm
+++ b/core/lib/Foswiki/Configure/Checkers/AuthScripts.pm
@@ -45,9 +45,38 @@ EOF
             );
         }
     }
+    my $e2 = _listOpenScripts( $this, $this->getCfg("{ScriptDir}") );
+    $msg .= $this->NOTE(
+'<b>Note:</b>The Following scripts are open to unauthenticated users:<br /> <code>'
+          . $e2
+          . '</code>' )
+      if $e2;
     return $msg;
 }
 
+sub _listOpenScripts {
+    my ( $this, $dir ) = @_;
+    my $unauth = '';
+    unless ( opendir( D, $dir ) ) {
+        return $this->ERROR(<<HERE);
+Cannot open '$dir' for read ($!) - check it exists, and that permissions are correct.
+HERE
+    }
+    foreach
+      my $script ( sort grep { -f "$dir/$_" && /^\w+(\.\w+)?$/ } readdir D )
+    {
+
+        #  Verify that scripts are executable
+        if (   $script !~ /\.cfg$/
+            && $script !~ /^configure/
+            && $Foswiki::cfg{AuthScripts} !~ m/\b$script\b/ )
+        {
+            $unauth .= $script . ' ';
+        }
+    }
+    closedir(D);
+    return $unauth;
+}
 1;
 __END__
 Foswiki - The Free and Open Source Wiki, http://foswiki.org/