Authenticated Remote Code Execution fix

WWBN · May 6, 2023 · 1df4af0 · 1df4af0
1 parent 89507b8
commit 1df4af0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/plugin/CloneSite/cloneClient.json.php b/plugin/CloneSite/cloneClient.json.php
@@ -94,6 +94,7 @@
 $json->sqlFile = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->sqlFile));
 $json->videoFiles = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->videoFiles));
 $json->photoFiles = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->photoFiles));
+$objClone->cloneSiteURL = escapeshellarg($objClone->cloneSiteURL);
 
 // get dump file
 $cmd = "wget -O {$clonesDir}{$json->sqlFile} {$objClone->cloneSiteURL}videos/cache/clones/{$json->sqlFile}";