Skip to content

Commit

Permalink
Remove change Web Template for normal users.
Browse files Browse the repository at this point in the history
  • Loading branch information
@ScIT-Raphael
ScIT-Raphael committed Feb 7, 2019
1 parent 1b69da2 commit e5f16b8
Showing 1 changed file with 0 additions and 47 deletions.
47 changes: 0 additions & 47 deletions web/templates/user/edit_web.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -85,53 +85,6 @@
<textarea size="20" class="vst-textinput" name="v_aliases"><?=htmlentities(trim($v_aliases, "'"))?></textarea>
</td>
</tr>
<tr>
<td class="vst-text input-label">
<?php print __('Web Template') . "<span class='optional'>" .strtoupper($_SESSION['WEB_SYSTEM']) . "</span>";?>
</td>
</tr>
<tr>
<td>
<select class="vst-list" name="v_template">
<?php
foreach ($templates as $key => $value) {
echo "\t\t\t\t<option value=\"".htmlentities($value)."\"";
$svalue = "'".$value."'";
if ((!empty($v_template)) && ( $value == $v_template ) || ($svalue == $v_template)){
echo ' selected' ;
}
echo ">".htmlentities($value)."</option>\n";
}
?>
</select>
</td>
</tr>
<?php if (!empty($_SESSION['WEB_BACKEND'])) { ?>
<tr>
<td class="vst-text input-label">
<?php print __('Backend Template') . " <span class='optional'>" . strtoupper($_SESSION['WEB_BACKEND']) . "</span>";?>
</td>
</tr>
<tr>
<td>
<select class="vst-list" name="v_backend_template">
<?php
foreach ($backend_templates as $key => $value) {
echo "\t\t\t\t<option value=\"".$value."\"";
$svalue = "'".$value."'";
if ((!empty($v_backend_template)) && ( $value == $v_backend_template ) || ($svalue == $v_backend_template)){
echo ' selected' ;
}
if ((empty($v_backend_template)) && ($value == 'default')){
echo ' selected' ;
}
echo ">".htmlentities($value)."</option>\n";
}
?>
</select>
</td>
</tr>
<?php }?>
<?php if (!empty($_SESSION['PROXY_SYSTEM'])) { ?>
<tr>
<td class="vst-text step-top">
Expand Down

4 comments on commit e5f16b8

@ioannidesalex
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I strongly disagree. What's the purpose of having users on the system if they can't edit their websites?

@vvcares
Copy link

@vvcares vvcares commented on e5f16b8 Feb 7, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, for strong security reasons, some major abilities must be under ADMIN's control only.
And the practical reasons behind is very simple : https://forum.vestacp.com/viewtopic.php?t=13822

@ioannidesalex
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are right about this. However only for Nginx+Apache installation, definitely not Nginx + PHP-FPM. Otherwise the user will be extremely limited. You shall give it a try.

@vvcares
Copy link

@vvcares vvcares commented on e5f16b8 Feb 8, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are right about this. However only for Nginx+Apache installation, definitely not Nginx + PHP-FPM. Otherwise the user will be extremely limited. You shall give it a try.

Hi. Yes understood. Thank you

Please sign in to comment.