ArkHost/WHMCS-ArkhostVPSAG
1
0
Fork 0
mirror of https://gitlab.com/ArkHost/WHMCS-ArkhostVPSAG.git synced 2026-07-23 23:36:06 +02:00
Code Issues Projects Releases Wiki Activity
17 Commits 1 Branch 5 Tags
7ccc92a039175634f771a2362a6971fc1cb8404e
Commit Graph
17 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Yuri Karamian 7ccc92a039 Harden VPSAG module: credential logging, path injection, suspension, signature, XSS 
- Redact decrypted reseller API credentials from module logs (ArkhostVPSAG_Error).
- Validate client-controlled values before they enter upstream API URL paths
  (graph time, backup file, firewall rule id, ISO id, rDNS IP); restrict VPS ID
  to digits. Prevents path/parameter injection (IDOR).
- Suspend via Disable/Enable instead of Stop/Start, and reject state-changing
  client-area actions on non-active services (suspended client can't power on).
- Verify the provisioning callback signature with hash_equals instead of !=.
- Fix callback assigned-IP assembly: keep all extra IPv4s, join with real
  newlines (was dropping the first IP and using a literal backslash-n).
- Make callback html_entity_decode array-safe.
- Escape untrusted output: JSON_HEX_TAG-encode serverInfo for the <script>
  block, HTML-escape serverInfo/OS fields in template + error.tpl, escape
  firewall/backup values built via innerHTML.
 2026-06-22 00:53:52 +02:00
Yuri Karamian 00a1921c77 vnc embedded option 2025-12-18 23:57:38 +01:00
Yuri Karamian ac2c3f08d9 vnc embedded option v1.5 2025-12-18 23:52:35 +01:00
Yuri Karamian f2f2222df7 vnc embedded option 2025-12-18 23:41:18 +01:00
Yuri Karamian 9c09719fb9 update README 2025-12-16 22:26:23 +01:00
Yuri Karamian ee3da3f0e7 add update OS/Package IDs 2025-12-16 22:25:09 +01:00
Yuri Karamian 804d05a600 update README 2025-12-16 22:23:07 +01:00
Yuri Karamian 1196783c2d update README 2025-12-16 22:12:57 +01:00
Yuri Karamian 94bc3045b8 update README 2025-12-16 22:08:31 +01:00
Yuri b4529ee9b2 README.md update 2025-11-19 23:41:46 +01:00
Yuri fae7960bbd README.md update 2025-11-19 23:40:06 +01:00
Yuri 0ed2a0076c README.md update with screenshots 2025-11-13 21:32:20 +01:00
Yuri 3efb34a506 fix sidebar actions 2025-11-13 11:00:13 +01:00
Yuri dbb00718c0 v1.4 2025-11-13 10:59:35 +01:00
Yuri dc5e603870 v1.4-final 2025-11-13 01:32:44 +01:00
Yuri e1424d34ee v1.4 v1.4 2025-11-13 01:00:43 +01:00
Yuri 6edebcd5b1 initial commit 2025-11-13 00:58:17 +01:00