Nemcio/VestaCP
1
0
Fork 0
mirror of https://github.com/serghey-rodin/vesta.git synced 2026-03-06 12:11:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

Restrict v-make-tmp-file to tmp folder

Browse Source
This commit is contained in:
Anton Reutov
2021-07-27 14:42:25 +03:00
committed by GitHub
parent bbe06d10b6
commit ea1e22613e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/api/index.php
View File

@@ -104,7 +104,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
// Check command
if ($cmd == "'v-make-tmp-file'") {
// Used in DNS Cluster
$fp = fopen($_POST['arg2'], 'w');
$fp = fopen('/tmp/'.basename($_POST['arg2']), 'w');
fwrite($fp, $_POST['arg1']."\n");
fclose($fp);
$return_var = 0;