Commit Graph

5778 Commits

Author SHA1 Message Date
usmannasir
5bfa4eee45 Merge branch 'v2.4.4' of github.com:usmannasir/cyberpanel into v2.4.4 2026-01-05 16:43:45 +05:00
usmannasir
d081f1578a cloud api docs 2026-01-05 16:43:10 +05:00
Master3395
646866f302 Merge pull request #1642 from master3395/v2.5.5-dev
Security: Update Python packages to fix critical vulnerabilities
2026-01-04 22:25:03 +01:00
master3395
764913a842 Security: Update Python packages to fix critical vulnerabilities
Fixed 5 critical security vulnerabilities in Python dependencies:

1. Tornado (6.4.1 -> >=6.4.2)
   - CVE-2024-52804: DoS via HTTP cookie parser
   - CVE-2025-47287: DoS via multipart/form-data parser

2. Requests (2.32.3 -> >=2.32.4)
   - CVE-2024-47081: URL parsing may leak .netrc credentials

3. Cryptography (43.0.0 -> >=43.0.1)
   - CVE-2024-12797: Vulnerable statically linked OpenSSL
   - PVE-2024-73711: Another OpenSSL vulnerability

4. PyJWT (unpinned -> >=2.10.1)
   - Multiple vulnerabilities in unpinned versions

5. psutil (unpinned -> >=7.2.0)
   - Security issues in older versions

Changes:
- Updated requirments.txt with secure minimum versions
- Added requirements-secure.txt for documentation

All packages updated to secure versions that address these CVEs.
2026-01-04 22:22:48 +01:00
Master3395
b91f1869aa Merge pull request #1641 from master3395/v2.5.5-dev
Fix: Enable website creation for regular users
2026-01-04 22:06:27 +01:00
master3395
091eb95e3a Fix: Enable website creation for regular users
- Fixed bug where regular users (UserACL) cannot create websites
- Changed UserACL createWebsite permission from 0 to 1
- Also enabled modifyWebsite and deleteWebsite for consistency
- Resolves issue where non-admin/reseller users were blocked from creating websites

Related changes:
- UserACL: createWebsite: 0 -> 1
- UserACL: modifyWebsite: 0 -> 1
- UserACL: deleteWebsite: 0 -> 1
- suspendWebsite remains 0 (admin-only feature)

This allows regular users to create, modify, and delete their own websites
while maintaining proper ownership checks and security controls.
2026-01-04 22:03:27 +01:00
Master3395
5d47436fb3 Merge pull request #1640 from master3395/v2.5.5-dev
V2.5.5 dev plugin installation and management
2026-01-04 21:33:07 +01:00
master3395
43dc004287 Add PLUGINS.md reference to INDEX.md
- Added Plugin System Guide to Plugins & Extensions section
- Added plugin system to Feature-Specific Guides section
- Author: master3395
2026-01-04 21:29:24 +01:00
master3395
8dd71a35f4 Add comprehensive plugin system documentation (PLUGINS.md)
- Complete guide for plugin installation and management
- Plugin development guide with code examples
- Plugin structure and requirements documentation
- TestPlugin reference guide
- Best practices and troubleshooting sections
- Author: master3395
2026-01-04 21:26:19 +01:00
master3395
7a8a9a9715 Merge branch 'v2.5.5-dev' of https://github.com/master3395/cyberpanel into v2.5.5-dev 2026-01-04 21:13:35 +01:00
master3395
c6ba63e537 Add plugin system enhancements and testPlugin
- Enhanced plugin installer to properly extract and install plugins
- Added security middleware exception for plugin webhook endpoints
- Improved plugin listing with better error handling
- Added testPlugin as example plugin for CyberPanel plugin system
- Updated INSTALLED_APPS and URL routing for plugins

Author: master3395
2026-01-04 21:04:51 +01:00
Master3395
6e36378917 Merge pull request #1639 from master3395/v2.5.5-dev
- Fixed CloudFlare proxy toggle button to display as oblong with a round dot
- Enable CloudFlare proxy by default for all domains/subdomains except mail domains
- Automatically add AAAA (IPv6) DNS records when creating domains/subdomains
- Added GetServerIPv6() function to retrieve server IPv6 address
- Updated DNS template styling and Angular.js binding for toggle buttons
2026-01-04 04:17:02 +01:00
master3395
da576c62db DNS improvements: CloudFlare proxy toggle styling, auto AAAA records, proxy defaults
- Fixed CloudFlare proxy toggle button to display as oblong with round dot
- Enable CloudFlare proxy by default for all domains/subdomains except mail domains
- Automatically add AAAA (IPv6) DNS records when creating domains/subdomains
- Added GetServerIPv6() function to retrieve server IPv6 address
- Updated DNS template styling and Angular.js binding for toggle buttons
2026-01-04 04:15:46 +01:00
Master3395
d94322dccb Merge pull request #1638 from master3395/v2.5.5-dev
V2.5.5 dev
2026-01-04 03:59:51 +01:00
master3395
d2a649251d Fix session status logic: Add IDLE state for logged-in users without processes, improve process detection with TTY filtering, enhance status messages with clearer explanations 2026-01-04 03:57:53 +01:00
master3395
acfb372f9c Enhance SSH Activity Management: Add active/inactive session indicators, improve IP extraction (IPv4/IPv6), optimize user activity loading, fix modal display issues 2026-01-04 03:44:29 +01:00
Master3395
da649631d6 Merge pull request #1637 from master3395/v2.5.5-dev
Fix CloudFlare DNS Management: Filter main domains only, auto-delete DNS records on domain removal, improve table display
2026-01-04 02:15:42 +01:00
master3395
f248ef23c4 Fix CloudFlare DNS Management: Filter main domains only, auto-delete DNS records on domain removal, improve table display
- Filter domain dropdown to show only main domains (exclude sub-domains)
- Add automatic CloudFlare DNS record deletion when domains/sub-domains are removed
- Improve DNS Records table display to match SSH Logins/Logs table styling
- Add loading states and proper table structure with ng-if conditions
- Update CSS to match activity-table styling with sticky headers
2026-01-04 02:13:46 +01:00
Master3395
59169ecb3f Merge pull request #1636 from master3395/v2.4.4
Fix SSH Logins and SSH Logs tables, to show the correct way.
2026-01-04 00:58:52 +01:00
master3395
aa77790834 Remove pagination from SSH Logins and SSH Logs tables, display all results directly 2026-01-04 00:55:25 +01:00
Master3395
73c19445a2 Merge pull request #1634 from master3395/v2.5.5-dev
Updated index.html to reference local copies of qrious.min.js and chart.umd.min.js. Added functionality in install.py and upgrade.py to download these libraries before running collectstatic. Updated website.html to ensure compatibility with the new local scripts.
2026-01-01 05:30:21 +01:00
Master3395
737c9b99c4 Download CDN libraries locally to eliminate tracking prevention warnings. Updated index.html to reference local copies of qrious.min.js and chart.umd.min.js. Added functionality in install.py and upgrade.py to download these libraries before running collectstatic. Updated website.html to ensure compatibility with the new local scripts. 2026-01-01 05:29:46 +01:00
Master3395
fadacdcb31 Merge pull request #1633 from master3395/v2.5.5-dev
Refactor configuration modification methods for improved safety

https://github.com/usmannasir/cyberpanel/issues/1609
2025-12-31 23:15:09 +01:00
Master3395
c0586099f3 Refactor configuration modification methods for improved safety and validation
- Introduced a `safeModifyHttpdConfig` method in `installUtilities` to handle modifications to the OpenLiteSpeed configuration file with backup, validation, and rollback capabilities.
- Updated various modules (`modSec.py`, `sslUtilities.py`, `tuning.py`, `vhost.py`, etc.) to utilize the new safe modification method, enhancing reliability and preventing configuration corruption.
- Improved error handling and logging throughout the configuration modification processes to ensure better traceability and debugging.
2025-12-31 23:13:53 +01:00
Master3395
821e65f82e Merge pull request #1632 from master3395/v2.5.5-dev
Update rsync exclude patterns in backupUtilities.py

https://github.com/usmannasir/cyberpanel/issues/1615
2025-12-31 22:56:17 +01:00
Master3395
0865b60c10 Update rsync exclude patterns in backupUtilities.py to use leading slashes for top-level directory exclusions. This change improves backup accuracy by ensuring only the intended directories are excluded during the backup process. 2025-12-31 22:55:09 +01:00
Master3395
e36a51a06c Merge pull request #1631 from master3395/v2.5.5-dev
V2.5.5 dev

https://github.com/usmannasir/cyberpanel/issues/1612
2025-12-31 22:46:00 +01:00
Master3395
8c068e2e9d Merge branch 'usmannasir:v2.5.5-dev' into v2.5.5-dev 2025-12-31 22:45:34 +01:00
Master3395
158098b9ee Enhance venvsetup.sh to conditionally create timezone.ini file
- Added logic to check for the successful installation of the timezonedb extension before creating the corresponding .ini file.
- Implemented a check to verify the existence of timezonedb.so in the PHP extension directory, improving the robustness of the installation process.

These changes ensure that the timezone configuration is only applied when the extension is available, enhancing the reliability of the setup script.
2025-12-31 22:44:58 +01:00
Master3395
5cd9d51e38 Merge pull request #1630 from master3395/v2.5.5-dev
Add support for PHP versions 8.2 to 8.5 in installation process
2025-12-31 22:36:17 +01:00
Master3395
62b72b4e06 Add support for PHP versions 8.2 to 8.5 in installation process
- Implemented logic to save new PHP versions (8.2, 8.3, 8.4, 8.5) and their corresponding extensions from XML configuration files.
- Enhanced compatibility with CentOS and Ubuntu distributions by dynamically determining the correct XML file paths for each PHP version.
- Improved error handling during the installation of PHP extensions to ensure robustness.

These changes enhance the PHP management capabilities within CyberPanel, allowing users to utilize the latest PHP versions seamlessly.
2025-12-31 22:35:18 +01:00
Master3395
cfcef26fd2 Merge pull request #1629 from master3395/v2.5.5-dev
Randomize acme.sh cron schedule in installation and upgrade scripts
2025-12-31 22:28:14 +01:00
Master3395
882a970104 Randomize acme.sh cron schedule in installation and upgrade scripts to prevent traffic spikes to Let's Encrypt. Added logic to generate random hour and minute for cron job entries, enhancing the installation process. 2025-12-31 22:26:50 +01:00
Master3395
13287d4608 Merge pull request #1628 from master3395/v2.5.5-dev
Implement Catch-All Email Configuration Management

https://github.com/usmannasir/cyberpanel/issues/1626
https://github.com/usmannasir/cyberpanel/issues/1627
2025-12-31 22:19:45 +01:00
Master3395
bcb5df3a0b Implement Catch-All Email Configuration Management
- Added new model `CatchAllEmail` to store catch-all email configurations per domain.
- Implemented views for fetching, saving, and deleting catch-all email configurations, enhancing email management capabilities.
- Updated URL routing to include endpoints for catch-all email operations.
- Enhanced error handling and permission checks for email forwarding actions.

These changes improve the flexibility and user experience of email management within CyberPanel.
2025-12-31 22:18:33 +01:00
usmannasir
6f55736d2b openlitespeed .htaccess module documentation 2025-12-28 22:43:02 +04:00
usmannasir
66212f6a59 Merge branch 'v2.4.4' of github.com:usmannasir/cyberpanel into v2.4.4 2025-12-28 22:41:49 +04:00
usmannasir
ccfe4db177 openlitespeed .htaccess module documentation 2025-12-28 22:40:56 +04:00
usmannasir
2fa71f65e6 update OLS module to v2.2.0 with progressive throttle
- Update module checksums for all platforms (rhel8, rhel9, ubuntu)
- Simplify module URLs to cyberpanel_ols.so
- Fixed BruteForceAllowedAttempts parsing
- Implemented progressive throttle (2s/5s/15s delays)
2025-12-28 15:24:04 +05:00
usmannasir
843cede15e update OLS module checksums for Phase 2 Brute Force Protection
- Update cyberpanel_ols module URLs to use /binaries/ path structure
- Update SHA256 checksums for all platforms (rhel8, rhel9, ubuntu)
- Enable RHEL 8 module support (was previously disabled)
- Module version 2.2.0 with Phase 2 features
2025-12-28 02:49:41 +05:00
usmannasir
942d508769 fix: update custom OLS binaries and add ModSecurity compatibility
- Update SHA256 checksums for December 2025 OLS build (v1.8.4.1)
- Add RHEL8 module support (cyberpanel_ols_x86_64_rhel8.so)
- Add compatible ModSecurity binaries to prevent ABI crashes
- Auto-detect and replace ModSecurity when custom OLS is installed
- Add auto-rollback feature if new binary fails to start
- Fix OWASP CRS UI toggle detection with multi-location checks

Features included in new binaries:
- PHPConfig support (.htaccess php_value/php_flag)
- Origin header forwarding (CORS/WebSocket support)
- Header unset fix (uses remove_resp_header API)
- Static linking for cross-platform compatibility

Platforms supported:
- Ubuntu 22.04+/Debian 12+ (ubuntu-static)
- AlmaLinux/Rocky/RHEL 9.x (rhel9-static)
- AlmaLinux/Rocky/RHEL 8.x (rhel8-static)
2025-12-27 21:07:16 +05:00
usmannasir
f3fd46e76d bug fix in n8n deployment 2025-12-26 14:24:13 +05:00
usmannasir
275134187e Merge branch 'v2.4.4' of github.com:usmannasir/cyberpanel into v2.4.4 2025-12-25 20:22:45 +04:00
usmannasir
b94fe07ea6 bug fix: improve sub domain page 2025-12-25 20:22:30 +04:00
usmannasir
d926d0736a Merge branch 'v2.4.4' of github.com:usmannasir/cyberpanel into v2.4.4 2025-12-18 13:10:48 +05:00
usmannasir
0a2582ae2d Merge branch 'v2.4.4' into v2.4.4-dev 2025-12-18 12:18:37 +05:00
usmannasir
92a459adcc security fixes 2025-12-18 12:18:32 +05:00
Master3395
5b35a3d37f Merge pull request #1622 from master3395/v2.5.5-dev
Implement dynamic PHP version detection and configuration updates
2025-12-17 19:54:05 +01:00
Master3395
adf3a853ed Implement dynamic PHP version detection and configuration updates
- Added a new function `detect_default_php` to dynamically determine the default PHP version based on symlink and available versions, enhancing compatibility with PHP 7.4-8.5.
- Updated `phpmyadmin_limits` to utilize the detected PHP version for configuration changes, ensuring accurate parameter adjustments for the current PHP environment.
- Enhanced installation scripts for Redis and Memcached extensions to support PHP versions 7.4-8.5, improving backward compatibility and installation reliability.
- Improved error handling for missing PHP configuration files, providing clearer feedback to users.

These changes enhance the flexibility and robustness of PHP management within CyberPanel.
2025-12-17 19:48:28 +01:00
Master3395
ba9f124de9 Merge pull request #1620 from master3395/v2.5.5-dev
V2.5.5 dev
2025-12-17 19:22:16 +01:00