From 08cc7f673c377bf88897743e340097e93f1e95f4 Mon Sep 17 00:00:00 2001 From: ftimme <ft@falkotimme.com> Date: Wed, 16 Jan 2013 09:30:05 -0500 Subject: [PATCH] - Changed regex for redirect path (Web sites, subdomains, vhost subdomains, alias domains) and web folder (vhost subdomains) so that ".." is not allowed (in order to prevent path traversals). - nginx: don't allow folders for proxy redirects (subdomains and alias domains); URL is required. - nginx: modified rewriting. --- server/plugins-available/bind_dlz_plugin.inc.php | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/server/plugins-available/bind_dlz_plugin.inc.php b/server/plugins-available/bind_dlz_plugin.inc.php index 6409270..b0ca870 100644 --- a/server/plugins-available/bind_dlz_plugin.inc.php +++ b/server/plugins-available/bind_dlz_plugin.inc.php @@ -77,7 +77,7 @@ global $conf; if(isset($conf['bind']['installed']) && $conf['bind']['installed'] == true) { - // Temporary disabled until the installer supports the automatic creatin of the nescessary + // Temporarily disabled until the installer supports the automatic creation of the necessary // database or at least to select between filebased nd db based bind, as not all bind versions // support dlz out of the box. To enable this plugin manually, create a symlink from the plugins-enabled // directory to this file in the plugins-available directory. @@ -349,4 +349,4 @@ unset($_db); } } // end class -?> \ No newline at end of file +?> -- Gitblit v1.9.1