Developer 8fc31b6c3a CRITICAL SECURITY FIXES: Address comprehensive audit findings
SECURITY FIXES:
1. Remove unsafe eval() function (launcher.sh:88-99)
   - eval() function removed entirely (was a code injection risk)
   - Function was unused but posed security liability

2. Fix SQL injection in database queries (reference-db.sh:225-229)
   - Properly escape single quotes in database names
   - Changed from incorrect backtick escaping to proper SQL escaping
   - Database names now safely used in WHERE clauses

3. Fix credential exposure (reference-db.sh:199-235)
   - MYSQL_PWD no longer exported (visible to child processes)
   - Password kept in local variable only
   - Set MYSQL_PWD only for individual mysql commands
   - Credentials immediately unset after use
   - Password never visible in 'ps aux' or /proc/environ

4. Refactored database queries
   - Each mysql command gets password set independently
   - Uses here-string (<<<) instead of process substitution for safety
   - Proper error handling per query

All critical vulnerabilities addressed
Syntax validation: PASS
2026-03-19 21:04:28 -04:00
2025-11-03 18:14:51 -05:00

🧪 Linux Server Toolkit - DEV Branch

STATUS: 🚀 Development & Testing Branch (Separate from Production)

This is the dev branch for testing, development, and experimentation. Changes here are isolated from production and can be safely tested before merging to main.


🚀 Quick Start

One command - pulls dev branch with YELLOW ⚠️ BETA banner:

curl -sL https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit/archive/dev.tar.gz | tar xz && source linux-server-management-toolkit/run.sh

When exiting (option 0), answer "yes" and cleanup happens automatically - no extra steps.


📍 Key Differences (Dev vs Production)

Feature Dev Branch Production
Cache .sysref.beta .sysref
Version 2.1.0-BETA 2.1.0
Banner 🟨 Yellow (⚠️) 🔵 Cyan
Git Branch dev main
Purpose Testing & Development Stable/Production

📦 Features

Comprehensive multi-panel server management suite supporting cPanel, InterWorx, Plesk, and standalone Apache with:

  • 🛡️ Security & Monitoring: Live attack monitor, bot blocker, malware scanner, IP reputation
  • 💾 Backup & Recovery: Acronis management, MySQL database restore
  • 🌐 Website Diagnostics: Error analysis, WordPress tools, Cloudflare detection
  • 📧 Email Diagnostics: Mail queue, blacklist checker, SPF/DKIM/DMARC validation
  • 📊 Performance Analysis: MySQL optimization, PHP tuning, hardware health, Varnish cache
  • 🔍 System Diagnostics: Health checks, loadwatch analysis, bandwidth monitoring

📖 Documentation

For detailed documentation, see the main repository: https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit


Version: 2.1.0-BETA Repository: https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit Branch: dev

S
Description
No description provided
Readme MIT 18 MiB
Languages
Shell 100%