Commit Graph

16 Commits

Author SHA1 Message Date
Ilia Ross
1a939a8e0a Fix to allow extractions for safe users
Some checks failed
Tests / prove (push) Has been cancelled
Package and upload artifacts / build (push) Has been cancelled
https://github.com/webmin/webmin/pull/2888
2026-10-18 19:19:25 +02:00
Ilia Ross
1bd44f6b1f Fix archive extraction for directory-restricted users
This PR fixes archive extraction bypassing Upload and Download directory restrictions.

Automatic extraction is hidden and rejected when uploads are limited to specific directories.

Unrestricted users keep the existing extraction behavior.

ANT-2026-TPYPGDF0: Reported by Adam in email on October 11, 2026 at 01:05.
2026-10-15 17:47:58 +02:00
Ilia Ross
ffe844d03d Check user later 2025-10-14 13:11:00 +03:00
Jamie Cameron
12edb92b6a Use the ReadParseMime function properly 2025-10-13 21:41:06 -07:00
Ilia Ross
447727ae68 Fix to always rename the file as effective user #1054 2025-10-13 23:39:02 +03:00
Ilia Ross
e9eda1ddc4 Add ability to write file directly to disk #2254 2024-08-19 05:12:55 +03:00
Jamie Cameron
ce5d99fe6b Escape uploaded path 2017-12-25 23:09:44 -08:00
Jamie Cameron
b001855672 Support multiple file uploads 2016-01-23 21:48:42 -08:00
Jamie Cameron
57480a2a96 Fix stupid use of length(@) when I meant scalar(@) 2010-12-17 12:16:14 -08:00
Jamie Cameron
4dbd56a48b Remove deprecated defined(@foo)
https://sourceforge.net/tracker/?func=detail&atid=117457&aid=3138980&group_id=17457
2010-12-17 11:49:53 -08:00
Jamie Cameron
9931077d49 Show upload and unzip progress 2010-11-07 21:09:17 -08:00
Jamie Cameron
14cb2d1964 Fix unzip in usermin 2010-07-26 07:55:55 -07:00
Jamie Cameron
e1caf700c0 Extract lha files. 2009-11-16 00:17:39 -08:00
Jamie Cameron
39b67ba4f1 Email after upload 2008-04-19 18:45:56 +00:00
Jamie Cameron
e508adf4e4 Completed ui-lib conversion 2008-01-02 05:39:50 +00:00
Jamie Cameron
fc1c1b243f Initial checkin of Webmin 2007-04-12 20:24:50 +00:00