Nemcio/VestaCP
1
0
Fork 0
mirror of https://github.com/serghey-rodin/vesta.git synced 2026-03-24 12:50:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #535 from SysVoid/patch-7

Browse Source 
[HIGH PRIORITY] Forgot to escape command arguments
This commit is contained in:
Serghey Rodin
2015-12-11 22:44:55 +02:00
parent df0d6c12cb fc0e7ba28b
commit 332ef2797e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/api/index.php
View File

@@ -42,7 +42,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
$i++;
if (!empty($_POST['arg' . $i]))
{
$args[] = $_POST['arg' . $i];
$args[] = escapeshellarg($_POST['arg' . $i]);
continue;
}
break;