From 901b6998b6461e1014c49bd1023366c93c1ad662 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?P=C3=A4r=20Hedberg?= Date: Mon, 5 Dec 2022 14:28:55 +0100 Subject: [PATCH] Prevent from deleting wlan.ini file --- code/components/jomjol_fileserver_ota/server_file.cpp | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/code/components/jomjol_fileserver_ota/server_file.cpp b/code/components/jomjol_fileserver_ota/server_file.cpp index 2aaa8dfd..4f8657b7 100644 --- a/code/components/jomjol_fileserver_ota/server_file.cpp +++ b/code/components/jomjol_fileserver_ota/server_file.cpp @@ -829,6 +829,12 @@ static esp_err_t delete_post_handler(httpd_req_t *req) return ESP_FAIL; } + if (filename == 'wlan.ini') { + ESP_LOGE(TAG, "Trying to delete protected file : %s", filename); + httpd_resp_send_err(req, HTTPD_500_INTERNAL_SERVER_ERROR, "Not allowed to delete wlan.ini"); + return ESP_FAIL; + } + if (stat(filepath, &file_stat) == -1) { ESP_LOGE(TAG, "File does not exist : %s", filename); /* Respond with 400 Bad Request */