Anton Reutov
cde1cd6651
stopped to renew LE if domain is not exit more
2021-07-28 20:12:07 +03:00
Anton Reutov
0fcbadda78
Grep carefully for 'END CERTIFICATE'
2021-07-28 19:43:04 +03:00
Anton Reutov
d97adaeb6a
Disabling login with 'root'
2021-07-28 14:19:12 +03:00
Anton Reutov
6b3cd17202
Fixing Apache status public access
2021-07-28 11:22:31 +03:00
Anton Reutov
c582ff3766
Checking period value in /list/rrd/
2021-07-27 22:19:45 +03:00
Anton Reutov
374d6c6b19
htmlentities() for token
2021-07-27 22:01:10 +03:00
Anton Reutov
1c801b2d60
Fix for downloading backup of other users
2021-07-27 21:50:33 +03:00
Anton Reutov
1ff5208968
Preventing admin to do loginas action without token
2021-07-27 20:58:34 +03:00
Anton Reutov
b123fa2178
Making sure chmod and chown does not follow symlinks
2021-07-27 15:38:29 +03:00
Anton Reutov
393c81d46c
Making sure chmod and chown does not follow symlinks
2021-07-27 15:27:20 +03:00
Anton Reutov
93eec18723
Making sure chmod and chown does not follow symlinks
2021-07-27 15:21:52 +03:00
Anton Reutov
45b13a2105
Making sure chmod and chown does not follow symlinks
2021-07-27 15:10:04 +03:00
Anton Reutov
f41ad21e1e
Update main.sh
2021-07-27 15:06:11 +03:00
Anton Reutov
8a60b257a2
Preventing uploads from other origin
2021-07-27 14:56:35 +03:00
Anton Reutov
ea1e22613e
Restrict v-make-tmp-file to tmp folder
2021-07-27 14:42:25 +03:00
Anton Reutov
bbe06d10b6
Checking licence format
2021-07-27 14:36:41 +03:00
Anton Reutov
3c31647926
Validate user input on domain
2021-07-27 14:35:40 +03:00
Anton Reutov
10bedc72f1
Merge pull request #2059 from zidingz/patch-1
...
Create SECURITY.md
2021-07-26 17:14:35 +03:00
Ziding Zhang
102ecb2c32
Create SECURITY.md
...
For your consideration: a quick instruction for future security researchers.
2021-07-26 15:08:34 +01:00
Anton Reutov
d0a21b4859
Ensure HTML will not be displayed in list log page
2021-07-26 17:08:17 +03:00
Anton Reutov
5f92fc5380
Added interface validation
2021-07-26 16:50:25 +03:00
Anton Reutov
a4e4542a6d
Checking licence format
2021-07-26 16:41:04 +03:00
Anton Reutov
c6b79fe5da
Check if it's vesta package
2021-07-26 14:59:10 +03:00
Byron Jumbo
04bf5fc042
[Action May Be Required] Changes to Cloudflare Infrastructure IPs Listed on cloudflare.com/ips
...
If your security model relies on allowing a list of trusted Cloudflare IPs from cloudflare.com/ips (or via API) on your origin, please make the following changes to your allow list by May 7, 2021. This change is safe to make today.
Remove:
104.16.0.0/12
Add:
104.16.0.0/13
104.24.0.0/14
2021-04-09 08:51:52 -05:00
Made I.T
bba7400b8a
Fix duplicated DNS records in DNS cluster
2020-12-10 12:13:46 +01:00
Airat Halitov
fb7f6254fa
Update v-update-sys-rrd-mem
2020-12-04 17:27:25 +05:00
Anton Reutov
1b85b7b313
Merge pull request #2030 from myrevery/patch-1
...
Update cn.php
2020-10-25 23:40:53 +03:00
dpeca
d7de756d70
Merge pull request #2039 from moucho/acme_v2_GET
...
Deprecate GET acme v2
2020-10-25 02:20:11 +02:00
moucho
2dc4adb08e
Deprecate GET acme v2
2020-10-22 13:48:45 +02:00
Hamed hojjati
246ea6888d
add single page applications support
2020-10-01 11:15:23 +03:30
myrevery
8d5c2e2e8e
Update cn.php
...
Refine some details.
2020-09-03 12:49:00 -07:00
Anton Reutov
af94a23962
Merge pull request #2029 from myrevery/patch-1
...
Update cn.php
2020-08-26 16:22:54 +03:00
myrevery
ce5d209c13
Update cn.php
2020-08-25 14:58:01 -07:00
dpeca
ef0f62a59b
Also checking "" in order to detect manually chunked record
...
And removing brackets, since they are not necessary when whole record is in one line
2020-08-23 19:44:12 +02:00
dpeca
311827c4b3
Not chunking already manually chunked TXT records
2020-08-19 14:52:45 +02:00
dpeca
f74301b19f
Split long TXT entries into 255 chunks
2020-08-19 12:44:46 +02:00
dpeca
ccea621787
Merge pull request #1947 from dawindk/patch-1
...
Only exclude logs folder from root, not in public_html
2020-08-19 11:07:55 +02:00
dpeca
c171d5e68e
Merge pull request #1969 from joshbmarshall/joshbmarshall-patch-1
...
Bugfix deleting a PostgreSQL database
2020-08-19 11:06:39 +02:00
dynanode
3b96845f8a
Update vsftpd.conf to support TLS connections
...
Updated config to support TLS 1.2 connections to vsftpd only.
2020-06-25 13:59:51 +02:00
dpeca
e0ebf729f3
Avoid Let's Encrypt domain validation timeout
2020-06-23 20:20:11 +02:00
dpeca
83d0b9ed90
Allow quick restarting of nginx
...
It can occur if domain has many aliases, and acme-challenge should be added many times
This fix will prevent this error:
```
May 14 21:39:08 server systemd[1]: nginx.service: Start request repeated too quickly.
May 14 21:39:08 server systemd[1]: nginx.service: Failed with result 'start-limit-hit'.
```
2020-06-23 20:14:55 +02:00
dpeca
d9e9c64369
Fixing NS parameters in v-add-dns-on-web-alias
2020-06-23 20:10:54 +02:00
dpeca
8d9e349b23
Dont match subdomains while restoring domain
2020-06-23 20:08:59 +02:00
dpeca
a9e46047e9
Reset UPDATE_SSL_SCRIPT
2020-06-23 20:04:30 +02:00
dpeca
c377e19df8
Adding escapeshellarg on few more places in php code
2020-06-23 19:06:25 +02:00
dpeca
b6cadcd992
Fixing unnecessary slash in nginx configs for phpmyadmin and roundcube
2020-06-23 18:01:38 +02:00
Borys Vrublevskyi
37fc05081b
cs-cart template for nginx php-fpm ubuntu 18.04
2020-04-16 16:47:23 +03:00
dpeca
cfc46bb2a9
Importing system enviroment in v-change-user-password
...
Thanks to @ScIT-Raphael for discovering this bug
2020-04-11 02:16:24 +02:00
dpeca
cc8a3e0c58
Correcting FTP link in v-backup-user
2020-04-09 20:53:27 +02:00
Maksim Usmanov | Maks
ce417f65a2
Fix reset password from CLI / roundcube
...
This will fix bug when change password from cli
$quota is not defined
I not know if there is any function to get quota with a single comand, so I get alredy defined quota
With out this vesta will reset quota or not asign nothing in passwd file when quota password was reset
2020-04-05 13:26:45 +02:00