From 551f85ad92ee781d2f3ca53455eb90b47105d0b4 Mon Sep 17 00:00:00 2001
From: ljm42 <larry_meaney@iname.com>
Date: Fri, 2 Feb 2024 12:51:23 -0700
Subject: [PATCH] escape more params

---
 emhttp/plugins/dynamix.plugin.manager/scripts/plugin | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/emhttp/plugins/dynamix.plugin.manager/scripts/plugin b/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
index 316ecb268..b2c767f9f 100755
--- a/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
+++ b/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
@@ -691,7 +691,7 @@ if ($method == 'install') {
       $event = "Install error";
       $subject = "plugin: ".basename($plugin_file);
       $description = "Plugin failed to install";
-      exec("$notify -e $event -s $subject -d $description) -i 2");
+      exec("$notify -e ".escapeshellarg($event)." -s ".escapeshellarg($subject)." -d ".escapeshellarg($description)." -i 'warning'");
       // run hook scripts for post processing
       post_hooks($error);
       done(1);