Commit graph

7 commits

Author SHA1 Message Date
Miraty
40e67b0c0c declare(strict_types=1); 2023-07-17 21:15:18 +02:00
Miraty
3436d0243f Display some field values again after submission 2023-07-17 21:02:09 +02:00
Miraty
7f7bcadb58 Fix important vulnerability in reg/ds.php + exescape
In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.
2023-06-19 02:15:43 +02:00
Miraty
8565ecdc22 --- > — 2023-01-21 04:16:02 +01:00
Miraty
335b826559 Gettext internationalization and english translation 2023-01-21 01:27:52 +01:00
Miraty
75e7caed88 More contextual submit button values 2022-12-20 23:25:33 +01:00
Miraty
73c137aaba Split pages/ between pg-act/ and pg-view/ 2022-12-20 21:17:03 +01:00
Renamed from pages/reg/ds.php (Browse further)