github/vesta
1
0
Fork 0
mirror of https://github.com/serghey-rodin/vesta.git synced 2025-08-21 05:44:07 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #535 from SysVoid/patch-7

Browse source 
[HIGH PRIORITY] Forgot to escape command arguments
This commit is contained in:
Serghey Rodin 2015-12-11 22:44:55 +02:00
commit 332ef2797e
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/api/index.php
View file

@ -42,7 +42,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
$i++; $i++;
if (!empty($_POST['arg' . $i])) if (!empty($_POST['arg' . $i]))
{ {
$args[] = $_POST['arg' . $i]; $args[] = escapeshellarg($_POST['arg' . $i]);
continue; continue;
} }
break; break;