open: /usr/local/lxlabs/kloxo/httpdocs/driver/pserver/cronlib.php
find:
static function add($parent, $class, $param)
{
if (!($parent->isClass('pserver') || $parent->priv->isOn('cron_minute_flag'))) {
if (!is_numeric($param['minute'])) {
$param['minute'] = 0;
}
}
$param['username'] = $parent->username;
/*
if ($parent->is__table('pserver')) {
$param['syncserver'] = $parent->nname;
} else {
$param['syncserver'] = $parent->syncserver;
}
*/
change it to:
static function add($parent, $class, $param)
{
if (!($parent->isClass('pserver') || $parent->priv->isOn('cron_minute_flag'))) {
if (!is_numeric($param['minute'])) {
$param['minute'] = 0;
}
}
if (strpos($param['command'], 'ssh') !== false) {
throw new lxexception("ssh_is_not_allowed_cmd_for_cron", '', '');
}
$param['username'] = $parent->username;
/*
if ($parent->is__table('pserver')) {
$param['syncserver'] = $parent->nname;
} else {
$param['syncserver'] = $parent->syncserver;
}
*/
and voala. ssh cmd is disabled
if you want to disable more cmd it must be:
if (strpos($param['command'], 'cmd1', 'cmd2', 'cmd3') !== false) {