From 82a9d6d444026ab8609df6a354e0e1af37d947ac Mon Sep 17 00:00:00 2001
From: Isaac Connor <isaac@zoneminder.com>
Date: Mon, 20 Feb 2023 11:41:41 -0500
Subject: [PATCH] Use validCardinal on Id to prevent executing other commands

---
 web/includes/Monitor.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/includes/Monitor.php b/web/includes/Monitor.php
index 4b0704abd..7819adbda 100644
--- a/web/includes/Monitor.php
+++ b/web/includes/Monitor.php
@@ -816,7 +816,7 @@ public static function getStatuses() {
         return false;
       }
 
-      $cmd = getZmuCommand($cmd.' -m '.$this->{'Id'});
+      $cmd = getZmuCommand($cmd.' -m '.validCardinal($this->{'Id'}));
       $output = shell_exec($cmd);
       Debug("Running $cmd output: $output");
       return $output;