Diuse/zhenxun_bot
1
0
Fork 0
mirror of https://github.com/zhenxun-org/zhenxun_bot.git synced 2025-12-15 14:22:55 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

🩹 修复路径注入

Browse Source
This commit is contained in:
HibiKier 2025-03-18 22:28:05 +08:00
parent 12660df8c3
commit cc1b199cdc
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
zhenxun/builtin_plugins/web_ui/api/configure/__init__.py
View File

@ -53,7 +53,7 @@ async def _(setting: Setting) -> Result:
if setting.db_url: if setting.db_url:
if setting.db_url.startswith("sqlite"): if setting.db_url.startswith("sqlite"):
base_dir = Path().resolve() base_dir = Path().resolve()
db_path = Path(setting.db_url.split(":")[-1]) db_path = Path(setting.db_url.split(":")[-1]).resolve()
parent_path = db_path.parent parent_path = db_path.parent
if not parent_path.absolute().is_relative_to(base_dir): if not parent_path.absolute().is_relative_to(base_dir):
return Result.fail("数据库路径不在项目根目录内。") return Result.fail("数据库路径不在项目根目录内。")
@ -63,6 +63,7 @@ async def _(setting: Setting) -> Result:
Config.set_config("web-ui", "username", setting.username) Config.set_config("web-ui", "username", setting.username)
Config.set_config("web-ui", "password", setting.password, True) Config.set_config("web-ui", "password", setting.password, True)
env_file.write_text(env_text, encoding="utf-8") env_file.write_text(env_text, encoding="utf-8")
if BAT_FILE.exists():
for file in os.listdir(Path()): for file in os.listdir(Path()):
if file.startswith(FILE_NAME): if file.startswith(FILE_NAME):
Path(file).unlink() Path(file).unlink()