github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-14 02:28:05 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed several Command Injection.

Browse source
This commit is contained in:
Sergio 2019-04-21 01:51:29 +02:00
commit 0831a198b8
3 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/edit/db/index.php
View file

@ -42,6 +42,8 @@ if ( $v_suspended == 'yes' ) {
$v_status = 'active';
}
$v_database = escapeshellarg($_GET['database']);
// Check POST request
if (!empty($_POST['save'])) {
$v_username = $user;