security fix: CP-21: Websites – Create Website

This commit is contained in:
Usman Nasir
2021-08-20 15:31:11 +05:00
parent c5ec9cc9ac
commit bf42a54be0
2 changed files with 2 additions and 2 deletions

View File

@@ -1813,7 +1813,7 @@ class WebsiteManager:
statusFile = data['statusFile']
if (statusFile[:16] == "/home/cyberpanel" or statusFile[:4] == '/tmp' or statusFile[:18] == '/usr/local/CyberCP') \
and statusFile != '/usr/local/CyberCP/CyberCP/settings.py' and statusFile.find('..') == -1:
and statusFile != '/usr/local/CyberCP/CyberCP/settings.py' and statusFile.find('..') == -1 and statusFile != '/home/cyberpanel/.my.cnf':
pass
else:
data_ret = {'abort': 1, 'installStatus': 0, 'installationProgress': "100",