Fixed several Command Injection.

This commit is contained in:
Sergio 2019-04-21 01:51:29 +02:00
commit 0831a198b8
3 changed files with 11 additions and 4 deletions

View file

@ -42,6 +42,8 @@ if ( $v_suspended == 'yes' ) {
$v_status = 'active';
}
$v_database = escapeshellarg($_GET['database']);
// Check POST request
if (!empty($_POST['save'])) {
$v_username = $user;