security improvments

2025-11-06 21:35:55 +01:00 · 2024-01-22 17:03:01 +05:00
parent d1151684dc
commit 01e7fa6f7a
7 changed files with 66 additions and 33 deletions
--- a/api/views.py
+++ b/api/views.py
@@ -535,11 +535,10 @@ def FetchRemoteTransferStatus(request):
            dir = "/home/backup/transfer-"+str(data['dir'])+"/backup_log"

            try:
-                command = f"cat {dir}"
-                status = ProcessUtilities.outputExecutioner(command)
-

                if hashPassword.check_password(admin.password, password):
+                    command = f"cat {dir}"
+                    status = ProcessUtilities.outputExecutioner(command)

                    final_json = json.dumps({'fetchStatus': 1, 'error_message': "None", "status": status})
                    return HttpResponse(final_json)