diff options
Diffstat (limited to 'ncp-web/ncp-launcher.php')
| -rw-r--r-- | ncp-web/ncp-launcher.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ncp-web/ncp-launcher.php b/ncp-web/ncp-launcher.php index 25fee4b1..eff9048c 100644 --- a/ncp-web/ncp-launcher.php +++ b/ncp-web/ncp-launcher.php @@ -66,8 +66,8 @@ if ( $_POST['action'] == "launch" && $_POST['config'] ) // sanitize $val = trim(escapeshellarg($new_params[$id]),"'"); - preg_match( '/[\'" ]/' , $val , $matches ) - and exit( '{ "output": "Invalid parameters" , "token": "' . getCSRFToken() . '" }' ); + preg_match( '/[\'" &]/' , $val , $matches ) + and exit( '{ "output": "Invalid characters in input" , "token": "' . getCSRFToken() . '" }' ); // save $cfg['params'][$index]['value'] = $val; |