FM / data

/usr/src/rmw/whm/remotemxwizard/data

Name	Size	Mode	Actions
checkforupdate.php	1304	0644	edit dl rm
manageproviders.php	12829	0644	edit dl rm

Edit: /usr/src/rmw/whm/remotemxwizard/data/checkforupdate.php (1304B)

<?php

##################################################
#                                                #
# GK~root - Creating a better web                #
# Copyright (c) GK~root. All Rights Reserved.    #
# Software: Remote Mx Wizard                     #
# Version: 1.0.3                                 #
# Create Date: Jan 07 2015                       #
#                                                #
##################################################

# The original self-updater fetched a tarball from the vendor domain
# (gk-root.com) over plain HTTP and executed it as root. That domain no
# longer belongs to the vendor, making the updater a remote-code-execution
# vector. Updates are now delivered exclusively through the
# cpanel-googleapps system package, so the remote calls have been removed
# and this page is inert. See Jira T3O2-14670.

if (getenv('REMOTE_USER') != 'root')
	die('Access Denied.');

?>
		<div class="option_box">
	        <div class="top-heading">
	            <h4>Check for updates</h4>
	        </div>
			<div class="option_contents">
				<div style="margin:5px"><p>This plugin is maintained and updated through your server's system package management (the <b>cpanel-googleapps</b> package). There is nothing to check for here.</p></div>
			</div>
		</div>

cmd: