8fc31b6c3aa6c75b47ebdb74246f4c7e32014813
SECURITY FIXES: 1. Remove unsafe eval() function (launcher.sh:88-99) - eval() function removed entirely (was a code injection risk) - Function was unused but posed security liability 2. Fix SQL injection in database queries (reference-db.sh:225-229) - Properly escape single quotes in database names - Changed from incorrect backtick escaping to proper SQL escaping - Database names now safely used in WHERE clauses 3. Fix credential exposure (reference-db.sh:199-235) - MYSQL_PWD no longer exported (visible to child processes) - Password kept in local variable only - Set MYSQL_PWD only for individual mysql commands - Credentials immediately unset after use - Password never visible in 'ps aux' or /proc/environ 4. Refactored database queries - Each mysql command gets password set independently - Uses here-string (<<<) instead of process substitution for safety - Proper error handling per query All critical vulnerabilities addressed Syntax validation: PASS
🧪 Linux Server Toolkit - DEV Branch
STATUS: 🚀 Development & Testing Branch (Separate from Production)
This is the
devbranch for testing, development, and experimentation. Changes here are isolated from production and can be safely tested before merging to main.
🚀 Quick Start
One command - pulls dev branch with YELLOW ⚠️ BETA banner:
curl -sL https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit/archive/dev.tar.gz | tar xz && source linux-server-management-toolkit/run.sh
When exiting (option 0), answer "yes" and cleanup happens automatically - no extra steps.
📍 Key Differences (Dev vs Production)
| Feature | Dev Branch | Production |
|---|---|---|
| Cache | .sysref.beta |
.sysref |
| Version | 2.1.0-BETA |
2.1.0 |
| Banner | 🟨 Yellow (⚠️) | 🔵 Cyan |
| Git Branch | dev |
main |
| Purpose | Testing & Development | Stable/Production |
📦 Features
Comprehensive multi-panel server management suite supporting cPanel, InterWorx, Plesk, and standalone Apache with:
- 🛡️ Security & Monitoring: Live attack monitor, bot blocker, malware scanner, IP reputation
- 💾 Backup & Recovery: Acronis management, MySQL database restore
- 🌐 Website Diagnostics: Error analysis, WordPress tools, Cloudflare detection
- 📧 Email Diagnostics: Mail queue, blacklist checker, SPF/DKIM/DMARC validation
- 📊 Performance Analysis: MySQL optimization, PHP tuning, hardware health, Varnish cache
- 🔍 System Diagnostics: Health checks, loadwatch analysis, bandwidth monitoring
📖 Documentation
For detailed documentation, see the main repository: https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit
Version: 2.1.0-BETA Repository: https://git.mull.lol/cschantz/Linux-Server-Management-Toolkit Branch: dev
Languages
Shell
100%