escape more params

This commit is contained in:
ljm42
2024-02-02 12:51:23 -07:00
parent 0d87850efd
commit 551f85ad92

View File

@@ -691,7 +691,7 @@ if ($method == 'install') {
$event = "Install error";
$subject = "plugin: ".basename($plugin_file);
$description = "Plugin failed to install";
exec("$notify -e $event -s $subject -d $description) -i 2");
exec("$notify -e ".escapeshellarg($event)." -s ".escapeshellarg($subject)." -d ".escapeshellarg($description)." -i 'warning'");
// run hook scripts for post processing
post_hooks($error);
done(1);