mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2025-11-08 06:16:08 +01:00
security fix: submitDomainCreation
This commit is contained in:
@@ -261,6 +261,9 @@ class WebsiteManager:
|
||||
else:
|
||||
return ACLManager.loadErrorJson('createWebSiteStatus', 0)
|
||||
|
||||
if data['path'].find('..') > -1:
|
||||
return ACLManager.loadErrorJson('createWebSiteStatus', 0)
|
||||
|
||||
if currentACL['admin'] != 1:
|
||||
data['openBasedir'] = 1
|
||||
|
||||
|
||||
Reference in New Issue
Block a user