Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
security: patch privilege escalation
  • Loading branch information
JMSDOnline committed Dec 10, 2021
1 parent 72a2fec commit 61c42a3
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions dashboard/inc/config.php
Expand Up @@ -406,7 +406,7 @@ function isEnabled($process, $username){

/* enable & start services */
case 66:
$process = $_GET['serviceenable'];
$process = escapeshellarg($_GET['serviceenable']);
if ($process == "resilio-sync"){
shell_exec("sudo systemctl enable $process");
shell_exec("sudo systemctl start $process");
Expand Down Expand Up @@ -455,7 +455,7 @@ function isEnabled($process, $username){

/* disable & stop services */
case 77:
$process = $_GET['servicedisable'];
$process = escapeshellarg($_GET['servicedisable']);
if ($process == "resilio-sync"){
shell_exec("sudo systemctl stop $process");
shell_exec("sudo systemctl disable $process");
Expand Down Expand Up @@ -504,7 +504,7 @@ function isEnabled($process, $username){

/* restart services */
case 88:
$process = $_GET['servicestart'];
$process = escapeshellarg($_GET['servicestart']);
if ($process == "resilio-sync"){
shell_exec("sudo systemctl enable $process");
shell_exec("sudo systemctl restart $process");
Expand Down

0 comments on commit 61c42a3

Please sign in to comment.