From d585a34a268829abfc6da95aacb73fd9d529ab5c Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Tue, 26 Sep 2017 13:11:01 -0700
Subject: [PATCH] Prevent users from running this as root/admin user

---
 upgrade.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/upgrade.php b/upgrade.php
index 42c4735cfb..368bbeccd5 100644
--- a/upgrade.php
+++ b/upgrade.php
@@ -1,6 +1,13 @@
 <?php
 (PHP_SAPI !== 'cli' || isset($_SERVER['HTTP_USER_AGENT'])) && die('Access denied.');
 
+$pwu_data = posix_getpwuid(posix_geteuid());
+$username = $pwu_data['name'];
+
+if (($username=='root') || ($username=='admin')) {
+    die("\nERROR: This script should not be run as root/admin. Exiting.\n\n");
+}
+
 echo "Welcome to the Snipe-IT upgrader.\n\n";
 echo "Please note that this script will not download the latest Snipe-IT \n";
 echo "files for you, it simply runs the standard composer and artisan \n";