From 824d1e6b135c1fddda9a2fbefdb3a17f58b36003 Mon Sep 17 00:00:00 2001
From: bwarsaw <>
Date: Mon, 24 Nov 2003 23:51:46 +0000
Subject: process_request(): In response to SF bug # 835870, we now check the
 calculated host name, and if VIRTUAL_HOST_OVERVIEW is true, that host name
 must match one of our known virtual hosts.  Otherwise we'll refuse to create
 the list.  If VIRTUAL_HOST_OVERVIEW is false, we'll do no checking (meaning
 the old behavior of being able to create a list with a non-fqdn hostname
 still exists).

Also, pass the email host name into the MailList.Create() call.
---
 Mailman/Cgi/create.py | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

(limited to 'Mailman/Cgi/create.py')

diff --git a/Mailman/Cgi/create.py b/Mailman/Cgi/create.py
index 79df14a5..5525d487 100644
--- a/Mailman/Cgi/create.py
+++ b/Mailman/Cgi/create.py
@@ -93,7 +93,7 @@ def process_request(doc, cgidata):
     auth     = cgidata.getvalue('auth', '').strip()
     langs    = cgidata.getvalue('langs', [mm_cfg.DEFAULT_SERVER_LANGUAGE])
 
-    if type(langs) <> ListType:
+    if not isinstance(langs, ListType):
         langs = [langs]
     # Sanity check
     safelistname = Utils.websafe(listname)
@@ -152,6 +152,15 @@ def process_request(doc, cgidata):
             doc, cgidata,
             _('You are not authorized to create new mailing lists'))
         return
+    # Make sure the web hostname matches one of our virtual domains
+    hostname = Utils.get_domain()
+    if mm_cfg.VIRTUAL_HOST_OVERVIEW and \
+           not mm_cfg.VIRTUAL_HOSTS.has_key(hostname):
+        safehostname = Utils.websafe(hostname)
+        request_creation(doc, cgidata,
+                         _('Unknown virtual host: %(safehostname)s'))
+        return
+    emailhost = mm_cfg.VIRTUAL_HOSTS.get(hostname, mm_cfg.DEFAULT_EMAIL_HOST)
     # We've got all the data we need, so go ahead and try to create the list
     # See admin.py for why we need to set up the signal handler.
     mlist = MailList.MailList()
@@ -175,7 +184,7 @@ def process_request(doc, cgidata):
         oldmask = os.umask(002)
         try:
             try:
-                mlist.Create(listname, owner, pw, langs)
+                mlist.Create(listname, owner, pw, langs, emailhost)
             finally:
                 os.umask(oldmask)
         except Errors.MMBadEmailError, s:
@@ -199,11 +208,9 @@ def process_request(doc, cgidata):
 
         # Initialize the host_name and web_page_url attributes, based on
         # virtual hosting settings and the request environment variables.
-        hostname = Utils.get_domain()
         mlist.default_member_moderation = moderate
         mlist.web_page_url = mm_cfg.DEFAULT_URL_PATTERN % hostname
-        mlist.host_name = mm_cfg.VIRTUAL_HOSTS.get(
-            hostname, mm_cfg.DEFAULT_EMAIL_HOST)
+        mlist.host_name = emailhost
         mlist.Save()
     finally:
         # Now be sure to unlock the list.  It's okay if we get a signal here
-- 
cgit v1.2.3