From 5a70c4ce66714554d08f0c87a6f4a33139f21049 Mon Sep 17 00:00:00 2001 From: mcramer <m.cramer@pixcept.de> Date: Tue, 13 Nov 2012 12:40:49 -0500 Subject: [PATCH] Implemented: - allowed /web as a base path for vhost subdomains - added security checks when deleting vhost subdomains, so no paths still used by other subdomains or the main web get deleted accidently --- interface/web/sites/web_vhost_subdomain_edit.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/interface/web/sites/web_vhost_subdomain_edit.php b/interface/web/sites/web_vhost_subdomain_edit.php index dff10c0..9089bef 100644 --- a/interface/web/sites/web_vhost_subdomain_edit.php +++ b/interface/web/sites/web_vhost_subdomain_edit.php @@ -369,7 +369,7 @@ $this->dataRecord['web_folder'] = strtolower($this->dataRecord['web_folder']); - $forbidden_folders = array('', 'cgi-bin', 'web', 'log', 'private', 'ssl', 'tmp', 'webdav'); + $forbidden_folders = array('', 'cgi-bin', 'log', 'private', 'ssl', 'tmp', 'webdav'); $check_folder = strtolower($this->dataRecord['web_folder']); if(substr($check_folder, 0, 1) === '/') $check_folder = substr($check_folder, 1); // strip / at beginning to check against forbidden entries if(strpos($check_folder, '/') !== false) $check_folder = substr($check_folder, 0, strpos($check_folder, '/')); // get the first part of the path to check it -- Gitblit v1.9.1