VladPolskiy/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2025-08-01 15:36:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Escape to prevent command expansion

Browse Source
This commit is contained in:
Ilia Rostovtsev
2020-10-07 20:17:21 +03:00
parent 1f50a3a4e6
commit 20f947e7e5
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
mysql/mysql-lib.pl
View File

@ -622,7 +622,12 @@ else {
sub escapestr
{
local $rv = $_[0];
# Prevent escaping query
$rv =~ s/'/''/g;
# Prevent escaping command
$rv =~ s/"/\\"/g;
return $rv;
}