Improved backup var validation

This commit is contained in:
Serghey Rodin 2014-12-19 00:39:59 +02:00
commit d21a6d4fe5

View file

@ -19,7 +19,7 @@ if (empty($_GET['backup'])){
unset($output);
include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/list_backup.html');
} else {
exec (VESTA_CMD."v-list-user-backup $user '".$_GET['backup']."' json", $output, $return_var);
exec (VESTA_CMD."v-list-user-backup $user '".escapeshellarg($_GET['backup'])."' json", $output, $return_var);
$data = json_decode(implode('', $output), true);
$data = array_reverse($data,true);
unset($output);