Security updates

This commit is contained in:
bergware
2021-08-13 15:11:40 +02:00
parent d1c227b476
commit feae745f81
31 changed files with 155 additions and 139 deletions
@@ -15,7 +15,9 @@ $docroot = $docroot ?? $_SERVER['DOCUMENT_ROOT'] ?: '/usr/local/emhttp';
// add translations
$_SERVER['REQUEST_URI'] = 'plugins';
require_once "$docroot/webGui/include/Translations.php";
require_once "$docroot/webGui/include/Secure.php";
exec("mv -f /boot/previous/* /boot");
file_put_contents("$docroot/plugins/unRAIDServer/README.md","**"._('DOWNGRADE TO VERSION')." {$_GET['version']}**");
$version = unscript($_GET['version']??'');
file_put_contents("$docroot/plugins/unRAIDServer/README.md","**"._('DOWNGRADE TO VERSION')." $version**");
?>
@@ -34,8 +34,8 @@ extract(parse_plugin_cfg('dynamix',true));
</head>
<body style="margin:14px 10px">
<?
$file = unscript($_GET['file']);
$tmp = unscript($_GET['tmp']) ? '/var/tmp' : '/tmp/plugins/';
$file = unscript($_GET['file']??'');
$tmp = unscript($_GET['tmp']??'') ? '/var/tmp' : '/tmp/plugins/';
if (file_exists($file) && strpos(realpath($file),$tmp)===0 && substr($file,-4)=='.txt') echo Markdown(file_get_contents($file)); else echo Markdown("*"._('No release notes available')."!*");
?>
@@ -19,11 +19,11 @@ require_once "$docroot/webGui/include/Translations.php";
require_once "$docroot/webGui/include/Helpers.php";
require_once "$docroot/plugins/dynamix.plugin.manager/include/PluginHelpers.php";
$system = $_GET['system'] ?? false;
$branch = $_GET['branch'] ?? false;
$audit = $_GET['audit'] ?? false;
$check = $_GET['check'] ?? false;
$init = $_GET['init'] ?? false;
$system = unscript($_GET['system']??'');
$branch = unscript($_GET['branch']??'');
$audit = unscript($_GET['audit']??'');
$check = unscript($_GET['check']??'');
$init = unscript($_GET['init']??'');
$empty = true;
$install = false;
$updates = 0;