Commit graph

33 commits

Author SHA1 Message Date
Miraty
edcad22a84 Fix missing string internationalization 2023-06-20 00:41:30 +02:00
Miraty
7f7bcadb58 Fix important vulnerability in reg/ds.php + exescape
In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.
2023-06-19 02:15:43 +02:00
Miraty
067e1ccf42 Allow SSH keys authentication for SFTP(Go) 2023-06-15 03:35:42 +02:00
Miraty
f05a55a7fa Display string rules, reg: allow "-" for subdomains 2023-06-05 00:18:10 +02:00
Miraty
a07baa7f62 Warn testing accounts users on every page 2023-06-02 22:45:27 +02:00
Miraty
69a8673fd6 Add link to the "about" page 2023-05-18 23:18:43 +02:00
Miraty
337e7ab27e Add setting to disable registrations
A new services['auth'] setting is available.
2023-05-10 01:34:45 +02:00
Miraty
f026b8b02d ht/index: list Header directive 2023-05-07 03:21:51 +02:00
Miraty
2e238f629d Don't allow double quotes in ns/caa.php actually 2023-05-06 20:31:13 +02:00
Miraty
2d4915a73a Allow double quotes in ns/caa.php 2023-05-06 20:21:40 +02:00
Miraty
54c64906f7 ht/dns-add: display recommended CAA record 2023-05-05 19:41:55 +02:00
Miraty
864f868890 Split accounts capabilities; Info about rate limit 2023-05-02 19:30:53 +02:00
Miraty
813927e03e Ensure domains are not too long 2023-04-21 19:01:46 +02:00
Miraty
d51f9dfac3 Set umask to 0077 everywhere 2023-04-19 14:59:07 +02:00
Miraty
a2ea572439 Fix operator precedence 2023-04-15 21:16:04 +02:00
Miraty
bd06fc7fbf Use Apache
- Allows customization through .htaccess
- No need to configure or reload a server when adding a site
- Content negotiation
2023-04-10 00:50:42 +02:00
Miraty
b9af7fee09 reg: Delay at unregistration; Display domain history 2023-03-25 16:26:05 +01:00
Miraty
ed05d4aab9 reg/register: add "Check availability" feature 2023-03-19 22:22:34 +01:00
Miraty
80bef2ca8c Minor fixes 2023-03-18 18:38:27 +01:00
Miraty
ca0759c8ab auth/username auth/unregister: password confirmation 2023-03-09 14:23:28 +01:00
Miraty
abb9aabf5b Advanced services status management 2023-03-09 01:35:30 +01:00
Miraty
b2bfbb7bf8 Niver > ServNest 2023-01-29 21:09:00 +01:00
Miraty
01e9881ce6 css: "text-align: right" for domains in tables 2023-01-23 01:39:18 +01:00
Miraty
312292d06a feature: reg: allow multiple suffixes 2023-01-23 01:14:59 +01:00
Miraty
4b54038c63 Fix pg-view/reg/transfer.php syntax 2023-01-21 04:17:58 +01:00
Miraty
8565ecdc22 --- > — 2023-01-21 04:16:02 +01:00
Miraty
b872ec8281 Some fixes and CSS enhancements 2023-01-21 02:52:28 +01:00
Miraty
335b826559 Gettext internationalization and english translation 2023-01-21 01:27:52 +01:00
Miraty
4f84025baf Encrypt display username, with key in cookie 2023-01-07 23:11:44 +01:00
Miraty
a3da268ead ht: subdomain and subpath on shared domain 2022-12-22 01:44:57 +01:00
Miraty
57dfb02a40 Store secret key in DB + autorotate it 2022-12-21 00:14:55 +01:00
Miraty
75e7caed88 More contextual submit button values 2022-12-20 23:25:33 +01:00
Miraty
73c137aaba Split pages/ between pg-act/ and pg-view/ 2022-12-20 21:17:03 +01:00