From 1e6ea5a91d122ca8d8eee9f04e8c16c80c73d669 Mon Sep 17 00:00:00 2001 From: Till Brehm <tbrehm@ispconfig.org> Date: Thu, 7 Aug 2014 09:25:50 +0200 Subject: [PATCH] Improved user check in nginx plugin. --- server/plugins-available/nginx_plugin.inc.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/server/plugins-available/nginx_plugin.inc.php b/server/plugins-available/nginx_plugin.inc.php index 2837e0eb94..b0e18c79a2 100644 --- a/server/plugins-available/nginx_plugin.inc.php +++ b/server/plugins-available/nginx_plugin.inc.php @@ -352,9 +352,9 @@ class nginx_plugin { return 0; } - if(!$app->system->is_allowed_user($data['new']['system_user'], false, true) - || !$app->system->is_allowed_group($data['new']['system_group'], false, true)) { - $app->log('Websites cannot be owned by the root user or group.', LOGLEVEL_WARN); + if($app->system->is_allowed_user($data['new']['system_user'], $app->system->is_user($data['new']['system_user']), true) == false + || $app->system->is_allowed_group($data['new']['system_group'], $app->system->is_group($data['new']['system_group']), true) == false) { + $app->log('Websites cannot be owned by the root user or group. User: '.$data['new']['system_user'].' Group: '.$data['new']['system_group'], LOGLEVEL_WARN); return 0; } -- GitLab