diff options
Diffstat (limited to 'ncp-web/ncp-launcher.php')
| -rw-r--r-- | ncp-web/ncp-launcher.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ncp-web/ncp-launcher.php b/ncp-web/ncp-launcher.php index 122a43ba..a74bb01a 100644 --- a/ncp-web/ncp-launcher.php +++ b/ncp-web/ncp-launcher.php @@ -66,7 +66,7 @@ if ( $_POST['action'] == "launch" && $_POST['config'] ) // sanitize $val = trim(escapeshellarg($new_params[$id]),"'"); - preg_match( '/ /' , $val , $matches ) + preg_match( '/[\'" ]/' , $val , $matches ) and exit( '{ "output": "Invalid parameters" , "token": "' . getCSRFToken() . '" }' ); // save |