mirror of
https://github.com/myronblair/novacpx
synced 2026-07-27 12:45:06 -05:00
NovaCPX Admin
bd4ac8426a
- New File Manager page under Admin > System, built on the existing /api/files endpoint (admin sessions with no linked hosting account get baseDir=/, i.e. full filesystem). - Fixed two baseDir=/ edge-case bugs in files.php: safe_path() double-slash prefix check, and list actions path stripping via str_replace corrupting every slash. - Added download and chown actions to files.php. - Added a server-enforced dangerous-path guard: write/delete/rename/chmod/chown/mkdir/upload/compress/extract targeting /etc,/boot,/root,/sys,/proc,/dev,/run,/lib*,/bin,/sbin,/var/lib,/snap are rejected with 409 unless confirm_dangerous=true is sent - matched by a client-side warning modal requiring a checkbox and typed CONFIRM. - install.sh: added zip package (required by the existing compress action, was missing).
14 lines
184 B
Plaintext
14 lines
184 B
Plaintext
# NovaCPX .gitignore
|
|
/etc/novacpx/config.ini
|
|
panel/api/config.php
|
|
VERSION
|
|
*.log
|
|
*.tmp
|
|
/var/
|
|
node_modules/
|
|
.DS_Store
|
|
Thumbs.db
|
|
panel/public/adminer.php
|
|
panel/public/adminer.php
|
|
*.bak-*
|