mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2026-03-06 20:30:45 +01:00
Merge branch 'stable' into v1.9.4
This commit is contained in:
@@ -306,7 +306,7 @@ class FileManager:
|
||||
if os.path.islink(self.data['fileName']):
|
||||
return self.ajaxPre(0, 'File exists and is symlink.')
|
||||
|
||||
if not self.data['fileName'].find(self.data['home']) > -1:
|
||||
if self.data['fileName'].find(self.data['home']) == -1 or self.data['fileName'].find('..') > -1:
|
||||
return self.ajaxPre(0, 'Not allowed to move in this path, please choose location inside home!')
|
||||
|
||||
command = 'mv ' + tempPath + ' ' + self.returnPathEnclosed(self.data['fileName'])
|
||||
|
||||
Reference in New Issue
Block a user