NovaCPX Admin d6321c3268 fix: File Manager upload never read target path from multipart POST/query string ...

upload only checked [path], which is parsed from JSON php://input and is always empty for multipart/form-data uploads. It silently fell back to a hardcoded /public_html, which does not exist at filesystem root - breaking uploads for the admin File Manager (baseDir=/) entirely, though it went unnoticed for regular hosting accounts since /public_html happens to be their real default. Now falls back through  and  as well.

2026-07-15 14:19:44 -05:00

..

accounts.php

fix: all code review security findings

2026-06-21 16:03:26 +00:00

auth.php

Security hardening: token-at-rest, rate limiting, XSS, transactions

2026-06-09 07:51:21 +00:00

backup.php

Role isolation, impersonation, account ownership, loading spinners, Docker fixes

2026-06-09 02:56:45 +00:00

branding.php

Add #18 reseller white-label branding + #24 audit log UI with filters

2026-06-08 03:51:45 +00:00

cloudflare.php

feat: items #9-13 — password change, webmail SSO, DKIM live, file manager security, cache busting

2026-06-08 01:19:33 +00:00

cron.php

Add full API endpoint suite, lib managers, webmail (Roundcube :8883), and NovaCPX icon/branding assets

2026-06-07 05:50:50 +00:00

databases.php

Fix MySQL create: sanitize db names, fix empty db_user default, catch RuntimeException

2026-06-09 18:42:24 +00:00

dkim.php

Add DKIM auto-provisioning, OS/panel self-update with self-healing

2026-06-07 15:54:15 +00:00

dns.php

Fix service status refresh, DNS zones, Docker page, SSL manager, input styling, updates

2026-06-08 11:56:14 +00:00

docker.php

fix: docker image-remove throws on daemon error; add sync-orphans endpoint

2026-06-22 12:32:45 +00:00

domains.php

Fix multiple user panel 500 errors

2026-06-09 18:32:10 +00:00

email.php

feat: #41-#47 admin root controls — enhanced pages + new APIs

2026-06-22 12:20:53 +00:00

features.php

feat: feature registry, auto-deploy, IP management, Docker support

2026-06-07 05:11:36 +00:00

files.php

fix: File Manager upload never read target path from multipart POST/query string

2026-07-15 14:19:44 -05:00

firewall.php

Streaming terminals for PHP extensions, SSL certificates; UFW logging state fix

2026-06-09 18:04:43 +00:00

ftp.php

Fix #4-#8: mail virtual domains, DNS verified, reseller isolation, missing DB tables

2026-06-08 03:31:30 +00:00

packages.php

fix: add null-coalescing defaults for all package update fields to suppress undefined key warnings

2026-06-23 16:07:47 +00:00

php.php

Streaming terminals for PHP extensions, SSL certificates; UFW logging state fix

2026-06-09 18:04:43 +00:00

proxy.php

Fix uninstall not resetting to setup screen

2026-06-09 13:16:50 +00:00

server_setup.php

Run panel on dedicated novacpx-web Nginx service; fix auth/transaction methods

2026-06-09 16:00:32 +00:00

sessions.php

feat: items #9-13 — password change, webmail SSO, DKIM live, file manager security, cache busting

2026-06-08 01:19:33 +00:00

ssl.php

Streaming terminals for PHP extensions, SSL certificates; UFW logging state fix

2026-06-09 18:04:43 +00:00

stats.php

Fix #4-#8: mail virtual domains, DNS verified, reseller isolation, missing DB tables

2026-06-08 03:31:30 +00:00

system.php

fix: add Adminer install/remove handler to db-tools-stream; fix sudo tty for phpMyAdmin

2026-06-22 23:58:59 +00:00

totp.php

feat: items #9-13 — password change, webmail SSO, DKIM live, file manager security, cache busting

2026-06-08 01:19:33 +00:00

users.php

fix: reseller creation and management in admin panel

2026-06-10 14:44:51 +00:00

webmail.php

feat: items #9-13 — password change, webmail SSO, DKIM live, file manager security, cache busting

2026-06-08 01:19:33 +00:00

whmcs.php

feat: server monitoring charts, package limits, WHMCS bridge, server options (#19-22)

2026-06-08 03:00:09 +00:00

wordpress.php

Fix SQLite backtick translation, add service-switch SSE streaming, Fail2Ban management page

2026-06-09 16:18:28 +00:00