Now all command-line arguments are being passed through escapeshellcmd()

diff --git a/inc/classes/main/request/console/class_ConsoleRequest.php b/inc/classes/main/request/console/class_ConsoleRequest.php
index 6ef86f5e7eb7aba82d475cced33c9bfca9dc690d..aaa1540e44979ff826d76b47b918c0032c7095d1 100644 (file)
--- a/inc/classes/main/request/console/class_ConsoleRequest.php
+++ b/inc/classes/main/request/console/class_ConsoleRequest.php
@@ -80,8 +80,8 @@ class ConsoleRequest extends BaseRequest implements Requestable {
                                // Add it likewise, but empty value
                                $this->setRequestElement($argArray[0], "");
                        } else {
-                               // Set a name=value pair
-                               $this->setRequestElement($argArray[0], $argArray[1]);
+                               // Set a name=value pair escaped and secured
+                               $this->setRequestElement($argArray[0], escapeshellcmd($argArray[1]));
                        }
                } // END - foreach
        }