Better fix for escaping in ticket #6371

This commit is contained in:
jim-p 2016-05-20 11:33:48 -04:00
parent c805b6e413
commit 0e4e4251eb

View File

@ -111,7 +111,7 @@ function update_email($email) {
// Did they pass an email?
if (!empty($email)) {
// Put it in the smartd.conf file
shell_exec("/usr/bin/sed -i .old 's/^DEVICESCAN.*/DEVICESCAN -H -m " . escapeshellarg(str_replace('`', '', $email)) . "/' /usr/local/etc/smartd.conf");
shell_exec("/usr/bin/sed -i .old " . escapeshellarg("s/^DEVICESCAN.*/DEVICESCAN -H -m {$email}/") . " /usr/local/etc/smartd.conf");
} else {
// Remove email flags in smartd.conf
shell_exec("/usr/bin/sed -i .old 's/^DEVICESCAN.*/DEVICESCAN/' /usr/local/etc/smartd.conf");