Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Rocket dashboard subrepository #25

Merged
merged 120 commits into from
Jun 12, 2022
Merged

Add Rocket dashboard subrepository #25

merged 120 commits into from
Jun 12, 2022

Conversation

caendesilva
Copy link
Member

Hyde Rocket 🚀 - Fast CMS dashboard for HydePHP

Project status: EXPERIMENTAL


Warning:

This software is designed to aid application development.
It may also be useful for testing purposes or for application
demonstrations that are run in controlled environments.

It must never be used on a public network.

Double warning:

I cannot stress enough how much you should only use this locally.

Rocket opens up several places for remote code execution.
For example, the dashboard can be used to open and execute
files on the server filesystem. While there are some validations
in place they are only intended to catch typos and mistakes.
For example, there are some path sanitizations to prevent
accidental file editing, but these are not made to secure
against directory traversal attacks.

There is also no authentication. Access to the dashboard
gives access to the entire project.

Installation

Rocket is not nearly ready to be installed.

However, when it is, it will probably be installed similar to Laravel Nova,
by downloading a zip file into the rocket directory of the project.

This is since Rocket is a full Laravel Lumen application,
and I'm not sure if it is possible to package it with Composer.

Developers note, before merging into the main branch,
this will be moved into the packages/ directory.

Right now, the rough installation process is:
clone the rocket directory into <your-project-root>/rocket,
navigate into the rocket directory, and run composer install.
And start up a development server.

@codecov
Copy link

codecov bot commented Jun 12, 2022

Codecov Report

Merging #25 (5e381e6) into master (ed0ac44) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master      #25   +/-   ##
=========================================
  Coverage     98.96%   98.96%           
  Complexity      667      667           
=========================================
  Files            88       88           
  Lines          1740     1740           
=========================================
  Hits           1722     1722           
  Misses           18       18           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed0ac44...5e381e6. Read the comment docs.

@caendesilva caendesilva merged commit b336b23 into master Jun 12, 2022
@caendesilva caendesilva deleted the RocketDashboard branch June 12, 2022 10:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant