Project

General

Profile

« Previous | Next » 

Revision 0886e3f5

Added by Scott Ullrich over 17 years ago

Correctly escape args.

View differences:

etc/inc/pfsense-utils.inc
2620 2620 
					fwrite($fd, $user['password']);
2621 2621 
					pclose($fd);
2622 2622 
				} else {
2623 
					log_error("Running: /usr/sbin/pw useradd -u {$user['uid']} -n {$user['name']} -c '" . escape_shell_args($user['fullname']) . " -g {$user['groupname']} -G {$group} -H 0");
2624 
					$fd = popen("/usr/sbin/pw useradd -u {$user['uid']} -n {$user['name']} -c " . escape_shell_args($user['fullname']) . " -g {$user['groupname']} -G {$group} -H 0", "w");
2623 
					log_error("Running: /usr/sbin/pw useradd -u {$user['uid']} -n {$user['name']} -c '" . escapeshellarg($user['fullname']) . " -g {$user['groupname']} -G {$group} -H 0");
2624 
					$fd = popen("/usr/sbin/pw useradd -u {$user['uid']} -n {$user['name']} -c " . escapeshellarg($user['fullname']) . " -g {$user['groupname']} -G {$group} -H 0", "w");
2625 2625 
					fwrite($fd, $user['password']);
2626 2626 
					pclose($fd);
2627 2627 
				}

Also available in: Unified diff