dev #8

Merged

miraty merged 9 commits from dev into main

2023-06-19 03:51:58 +02:00

miraty commented

2023-06-19 03:51:44 +02:00

Owner

No description provided.

miraty added 9 commits 2023-06-19 03:51:44 +02:00

Set a default error/exception handler 5d0d7b0f38

Warn testing accounts users on every page a07baa7f62

Don't require visiting /ht/ to enable SFTP access 0e64d6e2b8

Add debug message when denying SFTP login 4c9e5a5580

Display string rules, reg: allow "-" for subdomains f05a55a7fa

init.php + jobs + job to delete old testing accounts e4ae765486

Fix display username decryption error handling 256bd51e0f

Allow SSH keys authentication for SFTP(Go) 067e1ccf42

Fix important vulnerability in reg/ds.php + exescape 7f7bcadb58

In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.