github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-19 21:04:07 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #535 from SysVoid/patch-7

Browse source 
[HIGH PRIORITY] Forgot to escape command arguments
This commit is contained in:
Serghey Rodin 2015-12-11 22:44:55 +02:00
commit 332ef2797e
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/api/index.php
View file

@ -42,7 +42,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
$i++;
if (!empty($_POST['arg' . $i]))
{
$args[] = $_POST['arg' . $i];
$args[] = escapeshellarg($_POST['arg' . $i]);
continue;
}
break;