diff options
| author | nachoparker <nacho@ownyourbits.com> | 2019-06-02 00:43:09 +0300 |
|---|---|---|
| committer | nachoparker <nacho@ownyourbits.com> | 2019-06-02 00:43:15 +0300 |
| commit | 5de855ffecc49899a58d6078fb45afe42d3fe43a (patch) | |
| tree | 24eb5b30d414d2bc6d34a8bef067b2febdce7b16 /ncp-web | |
| parent | 86f14ae2a7f64cced81d5c22c25515eb9a8d3f0d (diff) | |
ncp-web: avoid quotes in fieldsv1.13.1
Signed-off-by: nachoparker <nacho@ownyourbits.com>
Diffstat (limited to 'ncp-web')
| -rw-r--r-- | ncp-web/ncp-launcher.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ncp-web/ncp-launcher.php b/ncp-web/ncp-launcher.php index 122a43ba..a74bb01a 100644 --- a/ncp-web/ncp-launcher.php +++ b/ncp-web/ncp-launcher.php @@ -66,7 +66,7 @@ if ( $_POST['action'] == "launch" && $_POST['config'] ) // sanitize $val = trim(escapeshellarg($new_params[$id]),"'"); - preg_match( '/ /' , $val , $matches ) + preg_match( '/[\'" ]/' , $val , $matches ) and exit( '{ "output": "Invalid parameters" , "token": "' . getCSRFToken() . '" }' ); // save |