Commit Graph
53 Commits
Author SHA1 Message Date
Lufei 99f7f62456 * Fix notice switch error in admin safe page. 2023-04-23 15:51:35 +08:00
Lufei 9e6711bbb2 * Fix security vulnerability in ping function.
The ping function previously accepted arbitrary user input and passed it to the exec function without any sanitization or validation, creating a command injection vulnerability. This commit adds input validation using filter_var to ensure that the address parameter is a valid IP address or hostname, and uses predefined command options to avoid passing user input directly to exec. Additionally, this commit simplifies the status return logic using a ternary operator.

Fix GH-112
2023-04-14 09:16:10 +08:00
鲁飞 5e5c93fbd8 Revert "Merge branch 'session' into 'master'"
This reverts merge request !7395
2023-04-13 08:55:06 +00:00
Lufei 6c1ea3dca9 * Fix typo. 2023-04-13 10:51:26 +08:00
鲁飞 37445a4968 * Support markdown for feishu webhook. 2023-04-03 03:28:39 +00:00
Lufei b498d4d677 * Change User-agent for http requests. 2023-03-28 10:41:54 +08:00
Lufei 949d528093 * Update README. 2023-03-20 15:07:35 +08:00
Lufei feefe21b3f - Remove useless code. 2023-02-25 15:10:56 +08:00
鲁飞 c93d138a83 + Support Apcu and Yac cache driver. 2023-02-22 06:20:00 +00:00
Lufei 63a8a97c59 * Compatible PHP5.3. 2023-02-21 09:15:53 +08:00
Lufei 4a9cadf0b5 * Fix missing Gogs,Gitea. 2023-02-02 15:47:10 +08:00
鲁飞 741917d2ab * Fix compatible error. 2023-02-02 03:46:31 +00:00
Lufei 6beeb45da4 * Fix typo. 2023-01-18 16:42:02 +08:00
Lufei 7623eacfe5 * Fix feishu webhook missing msg_type when no secret. 2022-12-23 11:30:43 +08:00
Lufei b19ce38241 * Fix doc comment for user module. 2022-12-22 16:27:40 +08:00
Lufei c3244b958f * Fix search style error in execution view page. 2022-12-19 16:36:14 +08:00
Lufei 9ca8e975c3 - Remove useless code for local upgrade. 2022-12-19 10:55:05 +08:00
Lufei 2fc604895d * Fix checkPriv error. 2022-12-14 09:37:25 +08:00
Lufei 447db0a97a * Fix sql injection when importing jira.
close GH-106
2022-12-14 09:37:00 +08:00
Lufei 79540ab480 * Use string instead of varchar. 2022-12-08 14:23:23 +08:00
Lufei 91d4f420ec * Change resetFileName. 2022-12-08 14:00:48 +08:00
Lufei d6db014f99 * Fix checkPriv error. 2022-12-08 14:00:14 +08:00
鲁飞 2f4ad5c556 * Format code and fix return value. 2022-12-06 06:05:18 +00:00
Lufei 90c061cb40 * Change report bug lang. 2022-12-02 15:07:22 +08:00
Lufei 6d35a6667a * Add help content for zentaoBot. 2022-12-02 10:46:35 +08:00
Lufei 80d2e0f6c0 * Add check ext-gd extension. 2022-12-01 12:16:57 +08:00
Lufei 3f556e626b * Fix get extension files error for use softlink. 2022-11-30 16:57:52 +08:00
Lufei 35b4ba9e92 * If run in container, no need check ok.txt. 2022-11-30 11:19:31 +08:00
Lufei 12e1539301 * Fix baseUrl scheme error for api createDemoData. 2022-11-29 18:28:13 +08:00
Lufei cc8254f1a0 - Remove useless output. 2022-11-29 16:46:52 +08:00
Lufei 2b85f62b75 * Update check filename. 2022-11-25 10:08:00 +08:00
Lufei 0a8110a3d8 * Jump when the version is different and the upgrade file exists. 2022-11-25 10:07:37 +08:00
鲁飞 fa166ed6e1 * Hide logout and user-deny page's footer in xuanxuan client mode. 2022-11-18 02:43:51 +00:00
Lufei 4fe09fb507 * Fix GH-104, Get extension removePath error. 2022-11-18 08:49:38 +08:00
Lufei 5233ebd813 * Optimize checkSafeFile tips for backup. 2022-11-17 15:50:55 +08:00
Lufei 49f6118bb2 - Remove useless config items. 2022-11-17 14:01:46 +08:00
Lufei 4328c922aa * Fix year in copyright. 2022-11-17 14:01:25 +08:00
Lufei 3c7a9fd285 - Remove getLatestRelease method. 2022-11-14 18:50:13 +08:00
鲁飞 b8619da3a6 * Fix missing requireFields error. 2022-11-07 09:14:12 +00:00
Lufei 3e69145e58 * Support task restart api. 2022-11-07 15:31:18 +08:00
Lufei 35ef023439 * Fix die error for xuanxuan. 2022-11-04 17:17:49 +08:00
鲁飞 95d10ea6d3 * Fix call api error. 2022-11-04 02:51:20 +00:00
鲁飞 e0cd779954 * Remove use exit for api. 2022-11-03 00:32:42 +00:00
Lufei 3970bc226d * Fix install and upgrade locate error. 2022-11-01 19:22:40 +08:00
Lufei ac363b3df7 * Fix install error. 2022-11-01 15:44:49 +08:00
Lufei 031838a6ce * Fix loadModel for entry. 2022-10-31 16:36:52 +08:00
鲁飞 b1cb5a798e * Fix bug of unauthorized users. 2022-10-28 08:16:50 +00:00
鲁飞 614f4f221d * Fix undefined variable. 2022-10-28 00:38:34 +00:00
Lufei 4628dfe98a - Remove useless loadModel search. 2022-10-20 14:25:07 +08:00
Lufei 261c3a0217 * Fix GH-92: Uncaught TypeError: Unsupported operand types: array + null. 2022-10-13 10:36:39 +08:00
Lufei 05950e0061 * Optimize README. 2022-09-30 15:48:10 +08:00
Lufei 51bd204786 * Fix return value declaration error of getFeishuData. 2022-09-03 09:58:36 +08:00
Lufei 34ac7b70e5 - Remove composer.json.
zentaopms is not published in packagist and the dependencies in the file are outdated
2022-08-18 09:16:53 +08:00