Commit Graph
83 Commits
Author SHA1 Message Date
Lufei 9e6711bbb2 * Fix security vulnerability in ping function.
The ping function previously accepted arbitrary user input and passed it to the exec function without any sanitization or validation, creating a command injection vulnerability. This commit adds input validation using filter_var to ensure that the address parameter is a valid IP address or hostname, and uses predefined command options to avoid passing user input directly to exec. Additionally, this commit simplifies the status return logic using a ternary operator.

Fix GH-112
2023-04-14 09:16:10 +08:00
zhaoke 75c713bab0 * Add curl instead file_get_contents in zahost model. 2023-03-16 09:40:13 +08:00
孙广明 260c4c0528 Merge branch 'zenops_62' into 'master'
Zenops 62

See merge request easycorp/zentaopms!7087
2023-02-28 05:22:00 +00:00
zhaoke 8fa5b6fc6f * Fix bug. 2023-02-15 18:17:18 +08:00
hufangzhou f3cd2e7d4d * Change the Easy Soft to ZenTao Software. 2023-02-15 17:01:22 +08:00
zhaoke d5090f876e * Fix update not check unique. 2023-02-07 02:03:23 +00:00
zhaoke ef650485ee * Fix bug #31493 2023-01-12 02:59:08 +00:00
tanghucheng b56690bd77 * Fix bug #31424. 2023-01-04 13:45:00 +08:00
tanghucheng 0c526f942f * Change image list icon. 2023-01-04 12:46:05 +08:00
tanghucheng 992c28684d * Fix bug #31412. 2023-01-04 12:16:33 +08:00
tanghucheng c27f758bf8 * Finish task #81387. 2022-12-27 13:36:30 +08:00
zhaoke 14ee6a0737 * Fix bug 30988. 2022-12-20 02:43:25 +00:00
zhaoke 57681a20a1 * Finish task 80387. 2022-12-19 10:57:17 +00:00
zhaoke ad8160dc7c * Fix bug. 2022-12-17 06:43:50 +00:00
zhaoke 121aff11a8 *Fix bug 30983. 2022-12-17 03:44:49 +00:00
zhaoke b3948acd66 Merge branch 'zenops_46_tanghucheng' of https://gitlab.zcorp.cc/easycorp/zentaopms into zenops_46_tanghucheng 2022-12-16 08:18:53 +00:00
zhaoke d6a903ccec * Fix bug 2022-12-16 08:17:23 +00:00
tanghucheng 3d3d9a3ef4 * Fix bug #30962,30965. 2022-12-16 15:15:42 +08:00
zhaoke cc9773b09d Merge branch 'zenops_46_tanghucheng' of https://gitlab.zcorp.cc/easycorp/zentaopms into zenops_46_tanghucheng 2022-12-15 02:30:23 +00:00
zhaoke 1cc515b6ac * Fix ztf submit err. 2022-12-15 02:28:36 +00:00
tanghucheng ef3f7a32d2 * Finish task #78647. 2022-12-15 10:00:48 +08:00
zhaoke cfcb3be5d1 * Fix issue. 2022-12-09 07:58:14 +00:00
zhaoke 4511932689 * Fix issue. 2022-12-09 02:18:28 +00:00
zhaoke d27ce40eec * Update control function name. 2022-12-06 08:43:43 +00:00
zhaoke 56b95ea028 Merge branch 'zenops_46_zhaoke_77683' into zenops_46_tanghucheng 2022-12-06 07:39:00 +00:00
zhaoke 65cad942f6 * Add zagent port to database. 2022-12-06 07:25:03 +00:00
tanghucheng ee2fed7a28 * Finish task #79050. 2022-12-06 13:40:26 +08:00
tanghucheng b135baf56c * Fix bug for yask #77683. 2022-12-05 17:17:52 +08:00
tanghucheng 8d0cad5108 Merge branch 'zenops_46_zhaoke_77683' into zenops_46_tanghucheng 2022-12-05 08:34:53 +08:00
zhaoke 9d79f78dcb * Add submit task status. 2022-12-02 08:58:57 +00:00
zhaoke d1e95a46cd * Finish task 77678. 2022-12-02 06:51:11 +00:00
tanghucheng 319f587f77 * Finish task #77679. 2022-12-02 08:33:22 +08:00
zhaoke a201d42fa5 Merge branch 'zenops_46' into zenops_46_zhaoke_77683 2022-12-01 07:38:58 +00:00
zhaoke 47c52757ca * Add cancel download. 2022-12-01 05:10:43 +00:00
tanghucheng 81505a483a * Modify the popover style for create ZAhost. 2022-11-30 08:36:56 +08:00
zhaoke fcf2169b20 Fix indent 2022-11-28 06:43:28 +00:00
zhaoke 1918eba8f4 * Fix issue. 2022-11-25 08:21:18 +00:00
zhaoke c1205cf2a2 * Fix image browse error 2022-11-25 05:52:53 +00:00
zhaoke e572022c29 * Add browse image 2022-11-25 02:59:55 +00:00
zhaoke ba428eaf49 * Update execnode code for sql change 2022-11-21 06:27:41 +00:00
zhaoke 65adccbff9 * Update for sql change. 2022-11-21 00:56:54 +00:00
zhaoke 45e1c4dc20 * Add view zahost. 2022-11-18 01:43:33 +00:00
wangjianhua fdf3e3cb16 + Add os info for VM image. 2022-11-15 13:07:57 +08:00
wangjianhua 4141110e74 * Modify function name. 2022-11-15 10:50:12 +08:00
wangjianhua 032641a085 * Add progress of downloading image. 2022-11-15 10:23:56 +08:00
zhaoke 0630753029 * Add default port 2022-11-15 01:39:44 +00:00
zhaoke 7da63113a5 Merge branch 'zenops_46_wangjianhua_74990' into zenops_46_zhaoke_74993 2022-11-15 00:41:37 +00:00
wangjianhua d4e8c3cfd3 * Modify image list page. 2022-11-14 17:42:42 +08:00
zhaoke 223c86c6fd * Finish task 74993. 2022-11-14 03:27:17 +00:00
wangjianhua 42fb46ed51 * Modify api of downloading image status. 2022-11-11 17:52:32 +08:00