Parcourir la source

Fix incorrect quoting

Additonal to https://github.com/hestiacp/hestiacp/commit/5dbc398d9fb00861fc8f75767b09de8981f86a48
Jaap Marcus il y a 5 ans
Parent
commit
e603a52618
2 fichiers modifiés avec 2 ajouts et 2 suppressions
  1. 1 1
      web/list/dns/index.php
  2. 1 1
      web/list/web/index.php

+ 1 - 1
web/list/dns/index.php

@@ -7,7 +7,7 @@ include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Data & Render page
 if (empty($_GET['domain'])){
-    exec (HESTIA_CMD."v-list-dns-domains $user json", $output, $return_var);
+    exec (HESTIA_CMD."v-list-dns-domains ".escapeshellarg($user)." 'json'", $output, $return_var);
     $data = json_decode(implode('', $output), true);
     $data = array_reverse($data, true);
     unset($output);

+ 1 - 1
web/list/web/index.php

@@ -6,7 +6,7 @@ $TAB = 'WEB';
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 
 // Data
-exec (HESTIA_CMD."v-list-web-domains $user json", $output, $return_var);
+exec (HESTIA_CMD."v-list-web-domains ".escapeshellarg($user)." 'json'", $output, $return_var);
 $data = json_decode(implode('', $output), true);
 $data = array_reverse($data,true);
 $ips = json_decode(shell_exec(HESTIA_CMD.'v-list-sys-ips json'), true);