Merge branch 'release-1.36' of github.com:ZoneMinder/zoneminder into release-1.36
commit
1c3b9fd4c1
|
@ -6,6 +6,7 @@ class HostController extends AppController {
|
|||
public $components = array('RequestHandler');
|
||||
|
||||
public function daemonCheck($daemon=false, $args=false) {
|
||||
$count = 0;
|
||||
# To try to prevent abuse here, we are only going to allow certain characters in the daemon and args.
|
||||
$safe_daemon = $daemon ? preg_replace('/[^A-Za-z0-9\- \.]/', '', $daemon, -1, $count) : false;
|
||||
if ($count) Error("Invalid characters found in daemon string ($daemon). Potential attack?");
|
||||
|
|
Loading…
Reference in New Issue