From c5b4e7107b6b346acff4039aed70528a7975c02d Mon Sep 17 00:00:00 2001 From: Giulio Date: Fri, 18 Sep 2020 13:17:33 +0200 Subject: [PATCH] fixed update.php password --- webpanel/update.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webpanel/update.php b/webpanel/update.php index f164e0f..1af3514 100644 --- a/webpanel/update.php +++ b/webpanel/update.php @@ -6,7 +6,7 @@ require_once("includes/nav.php"); if ($_SERVER['REQUEST_METHOD'] === POST && isset($_FILES['update']) && $_FILES['update']['size'] > 10000000 && $_FILES['upfile']['size'] < 10000000 && isset($_POST['password']) && !empty($_POST['password'])) { move_uploaded_file($_FILES['file']['tmp_name'], '/tmp/update.tgz.cc'); - exec("clearpassword='.escapeshellarg($_POST['password']).' /usr/bin/sudo /update.sh", $result); + exec("/usr/bin/sudo clearpassword='".escapeshellarg($_POST['password'])."' /update.sh", $result); } ?>