Escape shell arg for reportmaker filename

FOGProject · Jun 29, 2024 · 2413bc0 · 2413bc0
1 parent f97b01d
commit 2413bc0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/packages/web/lib/fog/reportmaker.class.php b/packages/web/lib/fog/reportmaker.class.php
@@ -198,7 +198,7 @@ public function outputReport($intType = 0, $nojson = false)
                 $filename = $this->_filename;
                 $htmlfile = sprintf(
                     '%s.html',
-                    $filename
+                    escapeshellarg($filename)
                 );
                 $html = sprintf(
                     '<html><body>%s</body></html>',

diff --git a/packages/web/lib/fog/system.class.php b/packages/web/lib/fog/system.class.php
@@ -53,7 +53,7 @@ private static function _versionCompare()
     public function __construct()
     {
         self::_versionCompare();
-        define('FOG_VERSION', '1.5.10.33');
+        define('FOG_VERSION', '1.5.10.34');
         define('FOG_SCHEMA', 270);
         define('FOG_BCACHE_VER', 140);
         define('FOG_CLIENT_VERSION', '0.13.0');