Ticket #2283 (closed defect: fixed)
Creation of a protected area should not be allowed outside DocumentRoot
|Reported by:||nuxwin||Owned by:||benedikt|
|Priority:||patch||Milestone:||ispCP ω 1.1.0|
|Component:||Frontend (GUI)||Version:||ispCP ω 1.0.4|
Description (last modified by benedikt) (diff)
A user can create a protected areas in all directories reachable via ftp. We must allow creation of protected areas only under a DocumentRoot (htdocs).
To resume, the creation of protected area must not be allowed under the following directories:
Note: Already fixed in my working copy. I'll commit ASAP.
- Severity changed from Easy to Medium
- Milestone changed from ispCP ω 1.0.5 to ispCP ω 1.0.6
- Owner changed from nuxwin to benedikt
- Status changed from assigned to new