Commit graph

1582 commits

Author SHA1 Message Date
myvesta
1e577e3000
Merge pull request #54 from serghey-rodin/master
Adding port to reset password link
2020-03-29 18:44:47 +02:00
dpeca
58807feb80
Adding port to reset password link 2020-03-29 18:13:22 +02:00
myvesta
9256193b0e
Merge pull request #52 from serghey-rodin/master
Preventing manipulation with $_SERVER['HTTP_HOST']
2020-03-23 17:38:43 +01:00
dpeca
c3c4de43d6
Preventing manipulation with $_SERVER['HTTP_HOST'] 2020-03-23 17:28:55 +01:00
myvesta
e37e5cf2a6
Merge pull request #51 from serghey-rodin/master
Pull from official vesta repo
2020-03-23 02:02:26 +01:00
myvesta
fe9d6c1c63
Update secure_login.php 2020-02-21 14:19:15 +01:00
dpeca
8dea5b43d3
Update secure_login.php 2020-02-16 01:50:38 +01:00
dpeca
b40ebe07e2
Allow whitelisting specific IP for /api/ 2020-01-07 23:43:14 +01:00
dpeca
f4b64b4b4e
Allow whitelisting specific IP to avoid secret_url 2020-01-07 23:26:03 +01:00
dpeca
436669607e
Allow softaculous in secure_login 2020-01-05 15:54:54 +01:00
dpeca
56ccb71ea8
Removing xml from proxy extensions list 2019-12-29 20:08:42 +01:00
Anton Reutov
931fb5beeb
Merge pull request #1944 from nothinux/i18n-php
update id.php
2019-10-21 13:25:31 +03:00
myvesta
619874873a
Merge pull request #38 from serghey-rodin/master
Update from official vesta github
2019-10-03 16:22:09 +02:00
dpeca
f0782d1f82
Fixing broken autoreply output
Broken in 0831a198b8 (diff-f07da7937954ae08bdb2e7379655ae29)
@sergio-nadal
2019-10-03 16:15:36 +02:00
Robin Dirksen
ec8631b2d2
Update nl.php 2019-10-01 16:28:03 +02:00
Taufik Mulyana
9947b17144 update id.php 2019-10-01 21:18:38 +07:00
myvesta
b951743e56
Deleting blanko in allow-index.php 2019-10-01 13:40:13 +02:00
dpeca
621a94e858
Create allow-index.php 2019-09-28 22:39:52 +02:00
myvesta
54908c53d6
Switch to vesta port if it connection came via nginx proxy 2019-09-25 15:51:21 +02:00
myvesta
1b2d6959df
Merge pull request #37 from serghey-rodin/master
Updates from Official VestaCP
2019-09-25 14:43:40 +02:00
dpeca
d08790457a
Add woff, woff2, xml extension as static file, removing html, htm 2019-09-23 18:09:01 +02:00
dpeca
65c24af9d5
Update secure_login.php 2019-09-11 23:48:33 +02:00
dpeca
8b39d8e847
Put secured login URL in welcome mail while creating user 2019-08-24 00:55:10 +02:00
dpeca
052031d103
Update secure_login.php 2019-08-21 02:05:12 +02:00
dpeca
1a26460eee
Update secure_login.php 2019-08-21 01:35:38 +02:00
dpeca
2c242d152d
Update secure_login.php 2019-08-21 01:33:39 +02:00
dpeca
181a99d5d7
Update secure_login.php 2019-08-20 20:11:43 +02:00
dpeca
e82ad200b7
Translated added string in sr.php 2019-08-18 16:37:00 +02:00
myvesta
0423d9a5e4
Update secure_login.php 2019-08-12 22:31:20 +02:00
Peca
db8b4ed21e Merge branch 'pr/34' 2019-08-10 17:09:42 +02:00
Serghey Rodin
b17b4b205d removed unnecessary single quotes for security reasons / thanks to Andrea Cardaci 2019-08-07 18:46:40 +03:00
dpeca
37d370390a
Update UploadHandler.php 2019-07-30 23:18:40 +02:00
myrevery
9c42ce85de
Update cn.php
Refine some details.
2019-07-15 06:17:02 -07:00
Alexandr Loskutov
36c12c618b
Merge pull request #1902 from darkworks/urdu_translation
Update ur.php
2019-06-28 17:32:40 +03:00
darkworks
0b0bcf6b15
Use Web Domain SSL Certificate -> ur.php
updated ur.php translation
2019-06-20 23:11:23 +05:00
myrevery
a6028ee4e9
Update cn.php
Refine some details.
2019-06-10 16:10:32 +08:00
Serghey Rodin
faf7612c7e
Merge pull request #1349 from serghey-rodin/add-caa-record
Add CAA DNS record
2019-05-14 10:57:13 +03:00
Anton Reutov
0031c93535
Merge pull request #1865 from sergio-nadal/security-fixes
Security fixes - CSRF / Command Injection / XSS
2019-04-22 19:48:00 +03:00
moucho
5df4dc819f Updated Spanish translation 2019-04-22 14:47:32 +02:00
Sergio
7226a8991f Fix some XSS. 2019-04-21 02:18:24 +02:00
Sergio
0831a198b8 Fixed several Command Injection. 2019-04-21 01:51:29 +02:00
Sergio
7603cdea7a Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST. 2019-04-21 00:11:36 +02:00
moucho
97a3b40047 Spanish translation update 2019-04-20 13:47:38 +02:00
Serghey Rodin
425e9f2483 18$ instead of 21$ 2019-04-16 12:53:58 +03:00
Serghey Rodin
ab95d5d88d removing single quote from escapeshellarg calls 2019-04-15 10:51:40 +03:00
Serghey Rodin
c28c5d29a3 setting content type to fix possible XSS attack vector 2019-04-12 17:21:28 +03:00
myrevery
a181433231
Update cn.php
Refine some details.
Format code and translate new keywords.
2019-03-31 05:50:02 +08:00
dpeca
8f03540a1b
Adding MAX_DBUSER_LEN in add_db.html template 2019-03-22 01:27:29 +01:00
Anton Reutov
1637f737e1
Merge pull request #1711 from clarkchentw/patch-2
Traditional Chinese - TW, update to match en.php
2019-03-20 12:44:20 +03:00
Serghey Rodin
6a9b7d3507 Use Web Domain SSL Certificate -> i18n 2019-03-14 14:34:38 +02:00