Enhancement: Management of Snapshots (delete)

[cemerich]

Hello motom001,
would be greate to have the possibility to delete Snapshots from the Webinterface.
Thanks Christian

[motom001]

sounds like a plan but is a important security topic to delete files on your pi
I will see how I can solve this without to open a security leek as big as a house... :)

[cemerich]

Hi,

you mean if your webserver(Backup Webserver) is used?

Can you restrict it to my own webserver?

Sorry for double entries in DoorPi and DoorPiWeb. Wasn’t sure where to put the request as there is also a lot of webserver stuff in DoorPiWeb.

Br. Christian

Von: Thomas [mailto:notifications@github.com]
Gesendet: Dienstag, 06. Oktober 2015 14:54
An: motom001/DoorPiWeb
Cc: cemerich
Betreff: Re: [DoorPiWeb] Enhancement: Management of Snapshots (delete) (#4)

sounds like a plan but is a important security topic to delete files on your pi
I will see how I can solve this without to open a security leek as big as a house... :)

—
Reply to this email directly or view it on GitHub #4 (comment) . https://github.com/notifications/beacon/AGczhCnuyXEwSKd0glXVRPyWC9ZiwpmZks5o47vwgaJpZM4GIkOn.gif

---

Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
https://www.avast.com/antivirus

[motom001]

I don't like the way to delete files on a raspberry by using the doorpi webservice without authentication and possibillity to restrict this, if somebody don't want to use this feature. So I have to think about a way for an secure implementation.

It's okay if you post it twice. Normally I use only the issues @ doorpi and not here. But you are right to post it here. I don't wanted to close the issue at doorpi so I reference this two issue each other.

Feel free to post where you want - I try to sort it my way :)

By the way - the access is restricted to your own DoorPi webserver because you hasn't publish it to the internet, hasn't you? It repository is only a way to stay up to date for the doorpi webinterface all the time but give the users the possibility to clone this repository and use it offline.