Project

General

Profile

« Previous | Next » 

Revision 9ff73b79

Added by Jim Pingle almost 15 years ago

Convert fullname field on users to descr, so it gains CDATA protection.

View differences:

etc/inc/auth.inc
333 333
	/* add or mod pw db */
334 334
	$cmd = "/usr/sbin/pw {$user_op} -q -u {$user_uid} -n {$user_name}".
335 335
			" -g {$user_group} -s {$user_shell} -d {$user_home}".
336
			" -c ".escapeshellarg($user['fullname'])." -H 0 2>&1";
336
			" -c ".escapeshellarg($user['descr'])." -H 0 2>&1";
337 337

  
338 338
	if($debug)
339 339
		log_error("Running: {$cmd}");

Also available in: Unified diff