mirror of
https://github.com/unraid/webgui.git
synced 2026-05-03 16:29:45 -05:00
Security updates
This commit is contained in:
@@ -15,7 +15,9 @@ $docroot = $docroot ?? $_SERVER['DOCUMENT_ROOT'] ?: '/usr/local/emhttp';
|
||||
// add translations
|
||||
$_SERVER['REQUEST_URI'] = 'plugins';
|
||||
require_once "$docroot/webGui/include/Translations.php";
|
||||
require_once "$docroot/webGui/include/Secure.php";
|
||||
|
||||
exec("mv -f /boot/previous/* /boot");
|
||||
file_put_contents("$docroot/plugins/unRAIDServer/README.md","**"._('DOWNGRADE TO VERSION')." {$_GET['version']}**");
|
||||
$version = unscript($_GET['version']??'');
|
||||
file_put_contents("$docroot/plugins/unRAIDServer/README.md","**"._('DOWNGRADE TO VERSION')." $version**");
|
||||
?>
|
||||
|
||||
@@ -34,8 +34,8 @@ extract(parse_plugin_cfg('dynamix',true));
|
||||
</head>
|
||||
<body style="margin:14px 10px">
|
||||
<?
|
||||
$file = unscript($_GET['file']);
|
||||
$tmp = unscript($_GET['tmp']) ? '/var/tmp' : '/tmp/plugins/';
|
||||
$file = unscript($_GET['file']??'');
|
||||
$tmp = unscript($_GET['tmp']??'') ? '/var/tmp' : '/tmp/plugins/';
|
||||
|
||||
if (file_exists($file) && strpos(realpath($file),$tmp)===0 && substr($file,-4)=='.txt') echo Markdown(file_get_contents($file)); else echo Markdown("*"._('No release notes available')."!*");
|
||||
?>
|
||||
|
||||
@@ -19,11 +19,11 @@ require_once "$docroot/webGui/include/Translations.php";
|
||||
require_once "$docroot/webGui/include/Helpers.php";
|
||||
require_once "$docroot/plugins/dynamix.plugin.manager/include/PluginHelpers.php";
|
||||
|
||||
$system = $_GET['system'] ?? false;
|
||||
$branch = $_GET['branch'] ?? false;
|
||||
$audit = $_GET['audit'] ?? false;
|
||||
$check = $_GET['check'] ?? false;
|
||||
$init = $_GET['init'] ?? false;
|
||||
$system = unscript($_GET['system']??'');
|
||||
$branch = unscript($_GET['branch']??'');
|
||||
$audit = unscript($_GET['audit']??'');
|
||||
$check = unscript($_GET['check']??'');
|
||||
$init = unscript($_GET['init']??'');
|
||||
$empty = true;
|
||||
$install = false;
|
||||
$updates = 0;
|
||||
|
||||
Reference in New Issue
Block a user