summaryrefslogtreecommitdiff
path: root/www/api/ccsr.php
diff options
context:
space:
mode:
Diffstat (limited to 'www/api/ccsr.php')
-rw-r--r--www/api/ccsr.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/www/api/ccsr.php b/www/api/ccsr.php
index 7efdf8d..403882f 100644
--- a/www/api/ccsr.php
+++ b/www/api/ccsr.php
@@ -73,7 +73,9 @@ require_once '../../includes/lib/check_weak_key.php';
$fp = fopen($incsr, "w");
fputs($fp, $CSR);
fclose($fp);
- $do = `/usr/bin/openssl req -in $incsr -out $checkedcsr`;
+ $incsr_esc = escapeshellarg($incsr);
+ $checkedcsr_esc = escapeshellarg($checkedcsr);
+ $do = `/usr/bin/openssl req -in $incsr_esc -out $checkedcsr_esc`;
@unlink($incsr);
if(filesize($checkedcsr) <= 0)
die("404,Invalid or missing CSR");