Commit Graph

4858 Commits

Author SHA1 Message Date
Master3395
ee6543f6bb Remove deprecated files and enhance IP blocking feature
- Deleted obsolete files: SECURITY_INSTALLATION.md, test.php, and test.sh.
- Improved IP blocking functionality in views.py by adding validation for private and reserved IP addresses, enhancing security against self-blocking.
- Updated error handling to capture specific issues related to IP validation and command execution.
- Revised FIREWALL_BLOCKING_FEATURE.md to reflect new validation and security measures.
2025-09-16 23:53:53 +02:00
Master3395
d8f120e73b Add firewall IP blocking feature and enhance security alerts
- Introduced a new API endpoint to block IP addresses via firewalld, allowing users to manage security directly from the dashboard.
- Updated the front-end to include a button for blocking IPs detected during brute force attacks, enhancing user interaction.
- Revised README.md and documentation to include details about the new firewall blocking feature and its usage.
- Improved the SSH security analysis function to streamline firewall command execution and ensure firewalld is active.
2025-09-16 23:24:41 +02:00
Master3395
e2dfdd454e Improve container management and Docker Compose generation
- Enhanced port validation in ContainerManager to check for valid port numbers and handle errors gracefully.
- Updated volume handling to ensure proper structure and existence checks.
- Added a new helper function to generate Docker Compose YAML, consolidating logic for service configuration, including ports, volumes, and environment variables.
- Removed duplicate Docker Compose generation code to streamline functionality.
2025-09-15 22:57:49 +02:00
Master3395
e2f06058c6 Enhance OS compatibility and documentation for CyberPanel
- Added support for Debian 11, 12, and 13 in the OS detection logic within cyberpanel.sh.
- Updated README.md to include Debian versions with their respective support timelines.
- Introduced a new Debian 13 Installation Guide in the documentation.
- Revised OS compatibility details in the testPlugin documentation to reflect full support for Debian versions.
2025-09-15 21:34:39 +02:00
Master3395
813bd2e4f9 Add CyberPanel port 7080 rule to firewall database for visibility
- Implemented a check to ensure the CyberPanel port 7080 rule exists in the database.
- Added functionality to create the rule if it does not exist, including error handling and logging.
- Updated the rules list after potential creation to reflect changes in the database.
2025-09-15 02:12:27 +02:00
Master3395
96226989b1 Add user notification preferences and related API endpoints
- Introduced a new model `UserNotificationPreferences` to store user-specific notification dismissal settings.
- Added context processor to include notification preferences in templates.
- Implemented API endpoints to dismiss backup and AI scanner notifications permanently.
- Updated front-end logic to handle notification dismissal via server-side checks and API calls.
- Enhanced documentation to include a new Custom CSS Guide for theme customization.
2025-09-15 02:01:11 +02:00
Master3395
792d91461a Merge branch 'v2.5.5-dev' of https://github.com/master3395/cyberpanel into v2.5.5-dev 2025-09-15 01:39:23 +02:00
Master3395
1f3d5afe6a Add PhpMyAdmin access middleware and session check for user authentication
- Updated settings.py to include PhpMyAdminAccessMiddleware for enhanced access control.
- Modified phpmyadminsignin.php to check user session and redirect to the login page if not authenticated.
2025-09-15 01:39:21 +02:00
Master3395
58d9515ac3 Merge branch 'usmannasir:v2.5.5-dev' into v2.5.5-dev 2025-09-15 01:27:35 +02:00
Master3395
1a82700f51 Update PHP version references and improve AlmaLinux 9 compatibility
- Changed PHP symlink from version 8.0 to 8.3 in various scripts to ensure compatibility with the latest PHP version.
- Updated documentation links in the FAQ to point to the new community support page.
- Added checks and fixes for MariaDB installation issues specific to AlmaLinux 9.
- Enhanced the installation script to support additional PHP versions and improve overall installation reliability.
2025-09-15 01:25:52 +02:00
Usman Nasir
7bd67d3df2 Merge pull request #1501 from master3395/v2.5.5-dev
V2.5.5 dev
2025-09-14 22:14:52 +05:00
Master3395
1fbbf66481 Add contributing guide link to README and improve security notice in SECURITY_INSTALLATION.md 2025-09-13 22:34:03 +02:00
Master3395
7bd66f7f06 Enhance environment variable management and security
- Updated .gitignore to include additional sensitive files and directories.
- Added python-dotenv to requirements for loading environment variables.
- Modified settings.py to load environment variables for sensitive configurations, including SECRET_KEY, DEBUG, and database credentials.
- Implemented secure .env file generation during installation to avoid hardcoding sensitive information.
- Introduced fallback method for settings update if environment generation fails.
2025-09-13 19:07:03 +02:00
Master3395
938fb6442b Merge pull request #1 from master3395/stable
Update backup controller to include backup frequency and retention data
2025-09-13 18:53:47 +02:00
Master3395
71275c8c56 Merge branch 'v2.5.5-dev' of https://github.com/master3395/cyberpanel into v2.5.5-dev 2025-09-13 18:39:00 +02:00
Master3395
0773d8d9a4 Add cosmetic context processor and update templates for custom CSS
- Introduced a new `cosmetic_context` processor to provide custom CSS data to templates.
- Updated `settings.py` to include the new context processor.
- Modified multiple HTML templates to utilize the `cosmetic` variable for dynamic CSS styling.
- Enhanced user interface elements with improved styling and accessibility features, including ARIA labels for form controls.
2025-09-13 18:38:57 +02:00
Usman Nasir
0c37a94e66 Merge pull request #1498 from master3395/v2.5.5-dev
V2.5.5 dev - New example plugin + Documentation + Security
2025-09-13 20:45:50 +05:00
Master3395
97fd4e055a Enhance security by adding rel="noopener" to external links
- Updated multiple HTML templates to include rel="noopener" on links that open in a new tab, improving security by preventing potential reverse tabnabbing attacks.
- This change affects various templates across the backup, base, file manager, mail server, and website functions sections.
2025-09-13 17:44:37 +02:00
Master3395
99bf8d9c96 Update backup controller to include backup frequency and retention data
https://www.facebook.com/groups/cyberpanel/permalink/3977223309255954/
2025-09-13 17:36:50 +02:00
Master3395
f95566d3eb Add pull image functionality and enhance error handling
- Implemented a new `pullImage` method in `ContainerManager` to pull Docker images with validation and error handling.
- Added a corresponding URL route for the `pullImage` view.
- Updated the `views.py` to handle user permissions and session management for the new feature.
- Improved error handling across the codebase by replacing `BaseException` with `Exception`.
- Enhanced rate limiting logic to support JSON format for tracking timestamps.
- Updated UI styles in `manageImages.html` for consistency in gradient backgrounds.
2025-09-12 22:35:02 +02:00
Master3395
1f4a577077 Enhance environment variable management with advanced mode and import/export features
- Implement advanced environment variable mode for bulk editing and easier management.
- Add functionality to import environment variables from existing Docker containers.
- Introduce export options for environment variables to .env files.
- Update UI to toggle between simple and advanced modes, with corresponding input fields.
- Enhance Docker Compose integration with environment variable handling and user guidance.
2025-09-12 21:10:06 +02:00
Master3395
583680ff90 Fix monthly bandwidth for websites
Fix monthly bandwidth for websites:
https://github.com/usmannasir/cyberpanel/issues/1496
2025-09-12 10:41:11 +02:00
Master3395
3d72839b33 Fix mirror gettoforge
https://github.com/usmannasir/cyberpanel/issues/1499
2025-09-12 09:42:52 +02:00
Master3395
601434eab6 Add security and more documentation
Add security and more documentation
2025-09-11 20:17:54 +02:00
Master3395
dfbbccf073 Add better plugin description + new example plugin
Add better plugin description + new example plugin
2025-09-11 20:04:09 +02:00
Usman Nasir
dbce860260 Merge pull request #1497 from master3395/v2.5.5-dev
Fix Mariadb on almalinux 9
2025-09-11 11:46:14 +05:00
Master3395
41ead838ef Add sieve by default.
Add sieve by default.
2025-09-10 20:01:52 +02:00
Master3395
90abff30ae Fix Mariadb on almalinux 9
Fix Mariadb on almalinux 9
2025-09-10 17:36:09 +02:00
usmannasir
b05d9cb5bb Implement comprehensive security for Docker container command execution
- Add command whitelist validation with 60+ safe commands
- Implement multi-layer security: whitelist + blacklist + specific rules
- Add rate limiting: max 10 commands per minute per user-container
- Enable comprehensive logging for all command executions
- Add input validation for container names and command syntax
- Implement output size limits to prevent memory exhaustion
- Allow privileged mode but restrict through command validation
- Add specific validation rules for systemctl, kill, wget/curl commands
- Block dangerous patterns: command injection, path traversal, destructive operations
- Maintain ACL-based container ownership verification
2025-09-10 14:23:40 +05:00
Usman Nasir
fb7bc20fa3 Merge pull request #1495 from master3395/stable
docs cleanup, link fixes, container console support, almalinux 10 compatibility, and adminpass special-char handling
2025-09-10 11:20:55 +05:00
Master3395
c5bb2f89ea Add Norwegian Bokmål language.
Add Norwegian Bokmål language.
2025-09-08 16:48:38 +02:00
Master3395
c06533b986 Fix ALL documentation links.
Fix ALL documentation links.
2025-09-08 11:50:35 +02:00
Master3395
0c8ee38c2b Add Almalinux 10 and php 84+85
Add Almalinux 10 and php 84+85
2025-09-07 22:57:53 +02:00
Master3395
c49200cca0 Resolve issue 1493
Should solve the issue in https://github.com/usmannasir/cyberpanel/issues/1493
2025-09-07 20:40:29 +02:00
Master3395
ef89effb80 Update README.md 2025-09-05 01:15:44 +02:00
Master3395
14dd84e9b9 improve docs, fix links, and add container console support
This update improves documentation clarity, fixes broken documentation links, and introduces a new feature that allows you to access and use the console directly inside containers from CyberPanel.
2025-09-05 01:14:04 +02:00
usmannasir
dd4ea8968f Merge branch 'v2.5.5-dev' into v2.4.4 2025-09-05 00:38:44 +05:00
usmannasir
c92600a62d bug fix: fix dynamic latest version of lsws server 2025-09-04 23:07:27 +05:00
usmannasir
c27439d8c3 bug fix: login issues 2025-09-04 13:03:10 +05:00
usmannasir
da9bd365cc php manager issue 2025-09-03 13:41:07 +05:00
usmannasir
2a9ad35d06 bug fix: php manager turning off uploads 2025-09-03 13:27:00 +05:00
usmannasir
c1f742425c bug fix: imuinfy restore after upgrade 2025-09-03 12:59:55 +05:00
usmannasir
07d86ac549 bug fix: imuinfy restore after upgrade 2025-09-03 02:04:36 +05:00
usmannasir
af2ff95739 bug fix: imuinfy restore after upgrade 2025-09-03 01:41:32 +05:00
usmannasir
195dac046f bug fix: imuinfy restore after upgrade 2025-09-03 01:32:06 +05:00
usmannasir
f13a1b8c20 bug fix: imuinfy restore after upgrade 2025-09-03 01:19:09 +05:00
usmannasir
6d7a86fb58 bug fix: imuinfy restore after upgrade 2025-09-03 01:11:11 +05:00
usmannasir
7fbb5f9123 bug fix: imuinfy restore after upgrade 2025-09-03 01:03:37 +05:00
usmannasir
4aff5fbd3a bug fix: imuinfy restore after upgrade 2025-09-02 23:34:16 +05:00
usmannasir
9a38b98ca9 v2.4.4 release 2025-09-01 13:11:42 +05:00