Missing a repository? Have a look at https://code.cacert.org/.

summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Tänzer <neo@nhng.de>2014-04-21 20:07:00 +0200
committerMichael Tänzer <neo@nhng.de>2014-04-21 20:07:00 +0200
commitc7c4d077688807bcbec21e11d0aeb0af9ebfbd30 (patch)
tree74ee152df3b0d09497252bbc98453e8fc280a6b4 /scripts/cron/warning.php
parent29cc1c30533de1f6caa6fa163b95970eee5ab8ef (diff)
downloadcacert-c7c4d077688807bcbec21e11d0aeb0af9ebfbd30.tar.gz
cacert-c7c4d077688807bcbec21e11d0aeb0af9ebfbd30.tar.xz
cacert-c7c4d077688807bcbec21e11d0aeb0af9ebfbd30.zip
Source code taken from cacert-20140419.tar.bz2
Diffstat (limited to 'scripts/cron/warning.php')
-rwxr-xr-xscripts/cron/warning.php3
1 files changed, 2 insertions, 1 deletions
diff --git a/scripts/cron/warning.php b/scripts/cron/warning.php
index 0c97ba2..8f607cd 100755
--- a/scripts/cron/warning.php
+++ b/scripts/cron/warning.php
@@ -38,7 +38,8 @@
{
$row['crt_name'] = str_replace("../", "www/", $row['crt_name']);
$row['crt_name'] = "/home/cacert/".$row['crt_name'];
- $subject = `openssl x509 -in '$row[crt_name]' -text -noout|grep Subject:`;
+ $crt_name = escapeshellarg($row['crt_name']);
+ $subject = `openssl x509 -in $crt_name -text -noout|grep Subject:`;
$bits = explode("/", $subject);
foreach($bits as $val)
{