Commit Graph

303 Commits

Author SHA1 Message Date
Miraty e96d61703b ns/sync.php: instant sync when adding new sync 2023-10-08 00:50:48 +02:00
Miraty 8624262482 reg/select-domain.inc.php: fix operator precedence 2023-10-01 19:14:08 +02:00
Miraty 94fd035010 sftpgo-auth: allow chmod 2023-09-20 18:47:26 +02:00
Miraty f11ba53af2 Add jobs/ns-update.php 2023-09-20 13:27:00 +02:00
Miraty 0504a5ce27 fix SYNC_TTL > NS_SYNC_TTL 2023-09-19 20:33:44 +02:00
Miraty 57a0baae54 add-dns: add cname to config, full CAA display 2023-09-19 20:27:27 +02:00
Miraty 3df402e8e9 add-dns.php: CNAME&co sourcing support 2023-09-16 19:45:46 +02:00
Miraty 63554b4908 Add instructions for cron(ie) setup 2023-09-01 02:20:09 +02:00
Miraty 54c44b174b pg-act/ns/print: fix NS_ALLOWED_TYPES name 2023-08-18 18:17:44 +02:00
Miraty e6cc5eed1c check.php: random subdomain for /ht/add-subdomain 2023-08-18 15:10:49 +02:00
Miraty 4217602b46 check.php: fix HTTPS_PORT migration to config.ini 2023-08-18 03:10:30 +02:00
Miraty eb3a331a2e fix HTML typo 2023-08-18 03:05:19 +02:00
Miraty c13555ae3b Output more information about what check.php does 2023-08-18 03:04:47 +02:00
Miraty 13a0abb378 Log out ghost sessions instead of displaying message 2023-08-17 18:20:08 +02:00
Miraty aa91004ab5 Move check.php settings to config.ini 2023-08-14 21:07:42 +02:00
Miraty bb937526a7 check.php: use null coalescing operator ("??") more 2023-08-14 18:20:47 +02:00
Miraty c40f52a21e zone-add: Try 1 => 3 name servers 2023-08-14 17:24:16 +02:00
Miraty d6ad7d66e0 pg-act/ns/zone-add: modernize code presentation 2023-08-14 01:54:54 +02:00
Miraty 3636e181c2 typo in var name 2023-08-13 20:55:50 +02:00
Miraty 2ebf1eee2a minor fixes 2023-08-13 19:50:45 +02:00
Miraty 40d6994126 Merge branch 'dev' 2023-08-13 18:54:46 +02:00
Miraty 377b68c828 auth/register: tokens_instance_cost 7200 > 1800 2023-08-13 18:54:24 +02:00
Miraty 0340c24a81 Use kdig() everywhere appropriate 2023-08-13 18:52:34 +02:00
Miraty 7c76559e7e Merge branch 'dev' 2023-08-11 19:00:19 +02:00
Miraty 4fbdcdb13b Knot timeout: 3 > 20 2023-08-11 18:56:52 +02:00
Miraty 95f376ab00 Merge pull request 'dev' (#9) from dev into main
Reviewed-on: #9
2023-08-02 00:52:33 +02:00
Miraty 2570d09ba9 Add reg/edit.php and regParseRecord() 2023-07-31 01:13:06 +02:00
Miraty 40e67b0c0c declare(strict_types=1); 2023-07-17 21:15:18 +02:00
Miraty 3436d0243f Display some field values again after submission 2023-07-17 21:02:09 +02:00
Miraty 0c15676520 reg/index: registration policy: display '∅' if empty 2023-07-16 21:08:49 +02:00
Miraty 3ddbc7cf1a reg: sync DS/NS using CDS/CSYNC from child zone 2023-07-16 21:00:38 +02:00
Miraty b05653d16f ns: add CSYNC to ALLOWED_TYPES 2023-07-05 19:53:39 +02:00
Miraty 1d856e1e2e ns/sync: translations and bugfixes 2023-06-26 04:13:52 +02:00
Miraty 858d6e8d02 Add ns/sync and jobs/ns-syncs 2023-06-24 16:54:36 +02:00
Miraty ccd17b7ffa Clear entries in ssh-keys when deleting account 2023-06-21 22:08:57 +02:00
Miraty b2fdc0c925 Fix jobs/check.php 2023-06-21 01:23:19 +02:00
Miraty d8b4ee90bb check.php: test domain transfers 2023-06-20 02:32:36 +02:00
Miraty edcad22a84 Fix missing string internationalization 2023-06-20 00:41:30 +02:00
Miraty 973a129079 Add type in functions signatures 2023-06-20 00:36:58 +02:00
Miraty f5aee06ff5 Merge pull request 'dev' (#8) from dev into main
Reviewed-on: #8
2023-06-19 03:51:58 +02:00
Miraty 7f7bcadb58 Fix important vulnerability in reg/ds.php + exescape
In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.
2023-06-19 02:15:43 +02:00
Miraty 067e1ccf42 Allow SSH keys authentication for SFTP(Go) 2023-06-15 03:35:42 +02:00
Miraty 256bd51e0f Fix display username decryption error handling 2023-06-14 22:23:15 +02:00
Miraty e4ae765486 init.php + jobs + job to delete old testing accounts 2023-06-08 17:36:44 +02:00
Miraty f05a55a7fa Display string rules, reg: allow "-" for subdomains 2023-06-05 00:18:10 +02:00
Miraty 4c9e5a5580 Add debug message when denying SFTP login 2023-06-03 18:44:48 +02:00
Miraty 0e64d6e2b8 Don't require visiting /ht/ to enable SFTP access 2023-06-02 23:12:59 +02:00
Miraty a07baa7f62 Warn testing accounts users on every page 2023-06-02 22:45:27 +02:00
Miraty 5d0d7b0f38 Set a default error/exception handler 2023-06-01 15:14:42 +02:00
Miraty e18c8d353c locales/update.sh: Use bash from env 2023-05-19 23:52:06 +02:00