status file proection

This commit is contained in:
Usman Nasir
2020-01-31 21:17:23 +05:00
parent dfbb936cdf
commit 7d524d270b

View File

@@ -1761,7 +1761,8 @@ class WebsiteManager:
try:
statusFile = data['statusFile']
if (statusFile[:16] == "/home/cyberpanel" or statusFile[:4] == '/tmp' or statusFile[:18] == '/usr/local/CyberCP') and statusFile != '/usr/local/CyberCP/CyberCP/settings.py':
if (statusFile[:16] == "/home/cyberpanel" or statusFile[:4] == '/tmp' or statusFile[:18] == '/usr/local/CyberCP') \
and statusFile != '/usr/local/CyberCP/CyberCP/settings.py' and statusFile.find('..') == -1:
pass
else:
data_ret = {'abort': 1, 'installStatus': 0, 'installationProgress': "100",