1
0
mirror of https://github.com/serghey-rodin/vesta.git synced 2025-03-12 04:36:25 -07:00

21 Commits

Author SHA1 Message Date
Serghey Rodin
387e6c8e0a revert back react handler 2021-10-31 21:46:06 +02:00
Serghey Rodin
93e9fe9f99 disable old php api 2021-10-29 11:29:30 +03:00
Anton Reutov
ea1e22613e
Restrict v-make-tmp-file to tmp folder 2021-07-27 14:42:25 +03:00
Serghey Rodin
ca3a9e0895 Security fix for API hash check 2018-06-24 10:38:16 +03:00
Serghey Rodin
eaf9d89096 Auth fix 0.9.8-20 2018-04-09 00:44:32 +03:00
Serghey Rodin
3fdee2975d Hardening password checks 2018-04-08 21:50:32 +03:00
Serghey Rodin
5babb1c55f fix argument shift 2016-06-24 18:06:15 +03:00
System Void
5d54f3bdc1 Update index.php 2015-11-24 08:01:24 +00:00
Serghey Rodin
ddf19a4bbc Merge branch 'master' of github.com:serghey-rodin/vesta 2015-10-22 16:58:12 +03:00
Serghey Rodin
7b0824015f Improved remote API 2015-10-21 15:49:22 +03:00
System Void
54f23757ea Removed closing PHP tags.
They aren't needed, and every little helps.
2015-08-04 14:41:32 +01:00
Serghey Rodin
1a7612cc66 password transmission via tmp files 2015-04-04 16:48:22 +03:00
INVENT
512283e528 Potential remote code execution vulnerability fix.
Can be exploitable, when we have X-Forwarded-For->X-Real-IP
transformation.
2015-01-19 15:51:46 +03:00
INVENT
c0d5b3765a Auth bypass vulnerability fix 2015-01-19 15:14:15 +03:00
Stuart H Jimenez
608b9d740a If you use an api key you wont have to set a user name, if you don't use a key you will have to login as admin. 2014-12-09 13:45:34 -06:00
estratos
c9bc37d8b8 Changed cmd Query on Api index.php
To avoid  "Notice : undefined variables " changed the way the cmd query
is built by validating each argument Not empty into the cmd command
string  (update)
2014-07-25 20:45:43 -06:00
estratos
387f673560 Changed cmd Query on Api index.php
To avoid  "Notice : undefined variables " changed the way the cmd query
is built by validating each argument Not empty into the cmd command
string
2014-07-25 20:35:50 -06:00
Estratos Consulting
2828dfc870 Update index.php
Comments about error coming from setting PHP Directive Display Errors to ON
Initializing arg1, arg2, ...arg9 ='' may be useful to avoid this problem when calling the API from a script
Error logic may break when you get this notifies on the response
2014-07-24 05:46:08 -06:00
Serghey Rodin
69442018fa More intelegent way to pass arguments to the CLI 2014-03-11 02:51:18 +02:00
Serghey Rodin
2c65001722 added returncode view for api 2013-05-22 15:16:39 +03:00
Serghey Rodin
410b7e3895 Web API wrapper 2013-02-19 23:27:54 +02:00