Disable UI when web updater is disabled in config.php

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

1 files changed, 22 insertions, 0 deletions

diff --git a/index.php b/index.php
index 4ff85f4..cf8b818 100644
--- a/index.php
+++ b/index.php
@@ -153,6 +153,8 @@ class Updater {
 	private $updateAvailable = false;
 	/** @var string */
 	private $requestID = null;
+	/** @var bool */
+	private $disabled = false;
 
 	/**
 	 * Updater constructor
@@ -175,6 +177,12 @@ class Updater {
 		require_once $configFileName;
 		$this->configValues = $CONFIG;
 
+		if ($this->configValues['upgrade.disable-web'] ?? false) {
+			// updater disabled
+			$this->disabled = true;
+			return;
+		}
+
 		$dataDir = $this->getDataDirectoryLocation();
 		if(empty($dataDir) || !is_string($dataDir)) {
 			throw new \Exception('Could not read data directory from config.php.');
@@ -211,6 +219,15 @@ class Updater {
 	}
 
 	/**
+	 * Returns whether the web updater is disabled
+	 *
+	 * @return bool
+	 */
+	public function isDisabled() {
+		return $this->disabled;
+	}
+
+	/**
 	 * Returns current version or "unknown" if this could not be determined.
 	 *
 	 * @return string
@@ -1279,8 +1296,13 @@ ini_set('log_errors', '1');
 // Check if the config.php is at the expected place
 try {
 	$updater = new Updater(__DIR__);
+	if ($updater->isDisabled()) {
+		http_response_code(403);
+		die('Updater is disabled, please use the command line');
+	}
 } catch (\Exception $e) {
 	// logging here is not possible because we don't know the data directory
+	http_response_code(500);
 	die($e->getMessage());
 }