mirror of
https://github.com/myvesta/vesta
synced 2025-08-19 21:04:07 -07:00
Restrict v-make-tmp-file to tmp folder
Thanks to @hestiacp and @jaapmarcus
This commit is contained in:
parent
16b33262af
commit
fdc6e191c2
1 changed files with 1 additions and 1 deletions
|
@ -116,7 +116,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
|
||||||
// Check command
|
// Check command
|
||||||
if ($cmd == "'v-make-tmp-file'") {
|
if ($cmd == "'v-make-tmp-file'") {
|
||||||
// Used in DNS Cluster
|
// Used in DNS Cluster
|
||||||
$fp = fopen($_POST['arg2'], 'w');
|
$fp = fopen('/tmp/'.basename($_POST['arg2']), 'w');
|
||||||
fwrite($fp, $_POST['arg1']."\n");
|
fwrite($fp, $_POST['arg1']."\n");
|
||||||
fclose($fp);
|
fclose($fp);
|
||||||
$return_var = 0;
|
$return_var = 0;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue