Info XUI.one Update 1.5.13

[mmicha17]

Thankx,
How to fix stream url
Not working: http://user:pass@host:port/m4/index.m3u8
Working: http://host:port/m4/index.m3u8
xtream ui working user pass, xui one not working stream url user pass.
How to fix?
Thankyou

Not quite sure what you are asking here to be honest

 

[maxnet]

Sorry my fault, I needed to bring old update server back online to get 1.5.5 and 1.5.12 zips, I'm going to create a drop in fix for all versions so people don't necessarily have to upgrade. Will bring it back online shortly

Hi, how are you @GTAXUI ? Any news bro, if it would be possible to do that patch for version 1.5.5?
Please, I'd really appreciate it. I'm currently using version 1.5.13 and am having a lot of issues with the server.

 

[Juanwom]

I have fixed high CPU in 1.5.13

 

[guetteur]

I have fixed high CPU in 1.5.13

How is this useful (As info and as replay) ?

 

[donoklv4]

So, we need to upgrade to new version?

 

[yepezpablo]

Okay so from my understanding based on what I've patched, the only method of firing the API command that would give read/write access to the filesystem and furthermore database extraction, requires being run from the main server IP or LB IP with the correct live streaming password. Alternatively you could try to exploit something else in XUI to call the API as localhost, like trying to get XUI to use file_get_contents().. but you'd still require the correct live streaming password.

But according to the logs, that's what someone has done, so it's possible! Now the live streaming password is derived from various variables including the license key, so a hacker with the right knowledge can derive the key if they knew the license key of the server... For those of you with cracked licenses, you all have the same license key! But for genuine users it would require a leak in theory...

Now if you've had an LB hacked into, they can look at the logs and get the live streaming password and they can also legitimately call the API. So the hacks coinciding with the leaked databases makes sense in this aspect.

Either way, you should update just incase.

Why don't you open the licensing system? Just that. Warning people that there won't be any more releases. $200 per license. You'll be making money out of the air

 

[netteflix]

Guys i need update file the link is dead. Smbdy help?

 

[anowise]

Guys i need update file the link is dead. Smbdy help?

Look here XUI