fix shell command injection
This commit is contained in:
parent
72b70636ba
commit
4fa9288fda
@ -59,6 +59,8 @@ class Shell
|
||||
return false;
|
||||
}
|
||||
|
||||
$command = escapeshellcmd($command);
|
||||
|
||||
// todo: find a better way (command could not be available)
|
||||
exec('command -v '.$command, $output, $code);
|
||||
|
||||
|
Reference in New Issue
Block a user