Prevent deletion of system files

2025-06-20 05:59:01 +02:00
parent bf9f1d2ffe
commit caa4142aa7
2 changed files with 10 additions and 0 deletions
--- a/api/delete.php
+++ b/api/delete.php
@ -5,6 +5,11 @@ require_once __DIR__ . '/../vfs.php';
 $data  = json_decode(file_get_contents('php://input'), true);
 $pathV = $data['path'] ?? '';

+if (strpos($pathV, '/.apps') === 0 || $pathV === '/.thos_state.json') {
+    echo json_encode(['success'=>false, 'error'=>'Cannot delete system files']);
+    exit;
+}
+
 $real = resolve_path($pathV);
 if (!file_exists($real)) {
    echo json_encode(['success'=>false,'error'=>'Not found']);