release: v1.3.0 — 整站备份恢复、跨后端同步与任务中心

server/utils/backup/paths.ts

@@ -0,0 +1,19 @@
+import { join } from 'node:path'
+import { getDataDir } from '../data-dir'
+
+export const BACKUP_ARCHIVE_EXT = '.phost.tar.gz'
+
+export function getBackupsDir(): string {
+  return join(getDataDir(), 'backups')
+}
+
+export function getBackupStagingDir(jobId: string): string {
+  return join(getBackupsDir(), 'staging', jobId)
+}
+
+export function isSafeBackupFilename(name: string): boolean {
+  if (!name || name.includes('..') || name.includes('/') || name.includes('\\')) {
+    return false
+  }
+  return name.endsWith(BACKUP_ARCHIVE_EXT)
+}