Commit graph

23 commits

Author SHA1 Message Date
Miraty
0496feb8fb Use custom certbot config path 2024-01-28 19:21:01 +01:00
Miraty
808de3fdbf Allow SSH keys for only "/" 2023-11-16 21:29:37 +01:00
Miraty
e96d61703b ns/sync.php: instant sync when adding new sync 2023-10-08 00:50:48 +02:00
Miraty
3df402e8e9 add-dns.php: CNAME&co sourcing support 2023-09-16 19:45:46 +02:00
Miraty
40e67b0c0c declare(strict_types=1); 2023-07-17 21:15:18 +02:00
Miraty
7f7bcadb58 Fix important vulnerability in reg/ds.php + exescape
In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.
2023-06-19 02:15:43 +02:00
Miraty
067e1ccf42 Allow SSH keys authentication for SFTP(Go) 2023-06-15 03:35:42 +02:00
Miraty
e4ae765486 init.php + jobs + job to delete old testing accounts 2023-06-08 17:36:44 +02:00
Miraty
f05a55a7fa Display string rules, reg: allow "-" for subdomains 2023-06-05 00:18:10 +02:00
Miraty
f3752163af Call Certbot before adding to DB 2023-05-04 02:20:29 +02:00
Miraty
5af557f630 Better return code checking, --force for zone-purge 2023-04-27 03:24:34 +02:00
Miraty
03e61fad26 Autoconfigure certbot using cli.ini 2023-04-26 14:08:47 +02:00
Miraty
5adb07c7c8 Update add-dns.php for newer db schema 2023-04-24 00:53:54 +02:00
Miraty
bf4eedbe71 Add 10ms delay after reloading Tor 2023-04-23 17:08:42 +02:00
Miraty
3749aa9b4a Fix exec()'s $output 2023-04-23 16:36:41 +02:00
Miraty
d51f9dfac3 Set umask to 0077 everywhere 2023-04-19 14:59:07 +02:00
Miraty
bd06fc7fbf Use Apache
- Allows customization through .htaccess
- No need to configure or reload a server when adding a site
- Content negotiation
2023-04-10 00:50:42 +02:00
Miraty
ac6d311ada Use unix sockets for Onion=>nginx connections 2023-01-29 23:16:58 +01:00
Miraty
d4009f189e Fix pg-act/ht/add-onion syntax 2023-01-29 23:14:09 +01:00
Miraty
b2bfbb7bf8 Niver > ServNest 2023-01-29 21:09:00 +01:00
Miraty
335b826559 Gettext internationalization and english translation 2023-01-21 01:27:52 +01:00
Miraty
a3da268ead ht: subdomain and subpath on shared domain 2022-12-22 01:44:57 +01:00
Miraty
73c137aaba Split pages/ between pg-act/ and pg-view/ 2022-12-20 21:17:03 +01:00