Topic: Dansguardian filter bypass on denied webpage

[kevinb]

Hello everyone,

I managed to get a login and password to work on the default "Denied Access" webpage in Dansguardian that allows the privileged users to bypass the block.

I'll try to list all the config settings that I know I changed to get things working:

danguardian.conf:

Code: [Select]


languagedir = '/etc/dansguardian/languages'
language = 'ukenglish'


danguardianf1.conf:

Code: [Select]


bypass = 300
bypasskey = ''
infectionbypass = 300
infectionbypasskey = ''
infectionbypasserrorsonly = on


Modify the "/etc/dansguardian/languages/ukenglish/template.html" by adding the following in the "body" section (add your own login and password). BTW ... I do not believe this is secure.

Code: [Select]


<script language="javascript">
<!--//
/*This Script allows people to enter by using a form that asks for a
UserID and Password*/
function pasuser(form) {
if (form.id.value=="yourloginhere") {
if (form.pass.value=="yourpasswordhere") {              
location="-BYPASS-"
} else {
alert("Invalid Password")
}
} else {  alert("Invalid UserID")
}
}
//-->
</script>

<center>
<table bgcolor="white" cellpadding="2" border="0" cellspacing="0">
<tr><td><h1><i><b><font size="2">UserID:</font></b></i></h1></td><td><form name="login"><input
name="id" type="text"></td></tr>
<tr><td><h1><i><b><font size="2">Password:</font></b></i></h1></td><td><input name="pass"
type="password"></td></tr>
<tr><td><center><input type="button" value="Login"
onClick="pasuser(this.form)"></center></td><td><center><br><input
type="Reset"></form></td></tr></table></center>


I am no html expert so there may be a better way to do this if so please let me know.


Kevin