From 006955229c5bd557585dfdad7abd113231984c1b Mon Sep 17 00:00:00 2001 From: xdrm-brackets Date: Mon, 20 Feb 2017 22:26:26 +0100 Subject: [PATCH] [Fixme] Check only first argument (before space if space) for syscall() --- lib/include/php/func | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/lib/include/php/func b/lib/include/php/func index d44140f..9fcfcf9 100755 --- a/lib/include/php/func +++ b/lib/include/php/func @@ -3,8 +3,12 @@ /* [1] Launches external script =========================================================*/ function syscall($dependency=null){ + + // cut in words + $words = explode(' ', $dependency); + /* (1) Check file */ - if( is_null($dependency) || !file_exists($dependency) ) + if( is_null($dependency) || !file_exists($words[0]) ) return false; /* (2) Call and catch output */