github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-14 10:37:42 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Revert "[SECURITY] Fix OS command injection."

Browse source
This commit is contained in:
Serghey Rodin 2015-12-11 21:14:49 +02:00
commit 39e9b6397b
115 changed files with 1980 additions and 1340 deletions
Download patch file Download diff file Expand all files Collapse all files

5
web/list/backup/exclusions/index.php
View file

@ -12,8 +12,9 @@ include($_SERVER['DOCUMENT_ROOT'].'/templates/header.html');
top_panel($user,$TAB);
// Data
v_exec('v-list-user-backup-exclusions', [$user, 'json'], false, $output);
$data = json_decode($output, true);
exec (VESTA_CMD."v-list-user-backup-exclusions $user json", $output, $return_var);
$data = json_decode(implode('', $output), true);
unset($output);
include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/list_backup_exclusions.html');
// Back uri

14
web/list/backup/index.php
View file

@ -13,14 +13,16 @@ top_panel($user,$TAB);
// Data
if (empty($_GET['backup'])){
v_exec('v-list-user-backups', [$user, 'json'], false, $output);
$data = json_decode($output, true);
$data = array_reverse($data, true);
exec (VESTA_CMD."v-list-user-backups $user json", $output, $return_var);
$data = json_decode(implode('', $output), true);
$data = array_reverse($data,true);
unset($output);
include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/list_backup.html');
} else {
v_exec('v-list-user-backup', [$user, $_GET['backup'], 'json'], false, $output);
$data = json_decode($output, true);
$data = array_reverse($data, true);
exec (VESTA_CMD."v-list-user-backup $user '".escapeshellarg($_GET['backup'])."' json", $output, $return_var);
$data = json_decode(implode('', $output), true);
$data = array_reverse($data,true);
unset($output);
include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/list_backup_detail.html');
}