Nemcio/CyberPanel
1
0
Fork 0
mirror of https://github.com/usmannasir/cyberpanel.git synced 2025-11-09 14:56:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

security fix: submitDomainCreation

Browse Source
This commit is contained in:
Usman Nasir
2020-02-08 12:51:45 +05:00
parent 7b3029e905
commit 4611c327d6
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
websiteFunctions/website.py
View File

@@ -261,6 +261,9 @@ class WebsiteManager:
else: else:
return ACLManager.loadErrorJson('createWebSiteStatus', 0) return ACLManager.loadErrorJson('createWebSiteStatus', 0)
if data['path'].find('..') > -1:
return ACLManager.loadErrorJson('createWebSiteStatus', 0)
if currentACL['admin'] != 1: if currentACL['admin'] != 1:
data['openBasedir'] = 1 data['openBasedir'] = 1