diff --git a/plugins/dynamix/include/local_prepend.php b/plugins/dynamix/include/local_prepend.php index 9b147ac21..ccf87e48b 100644 --- a/plugins/dynamix/include/local_prepend.php +++ b/plugins/dynamix/include/local_prepend.php @@ -15,7 +15,7 @@ * auto_prepend_file="/usr/local/emhttp/webGui/include/local_prepend.php" */ function csrf_terminate($reason) { - shell_exec("logger error: {$_SERVER['REQUEST_URI']}: $reason csrf_token"); + shell_exec("logger error: " . escapeshellarg($_SERVER['REQUEST_URI']) . ": $reason csrf_token"); exit; } putenv('PATH=.:/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin');