further password disclosure avoidance

2015-07-10 14:07:17 +03:00
parent 4c1d2bd0fe
commit 70f12a69d4
2 changed files with 2 additions and 2 deletions
--- a/submit.php
+++ b/submit.php
@@ -34,7 +34,7 @@ file_put_contents($PASSFILE, $PASS);
 if($SURE == "yes")
 {
  // Creates full command
-  $command = '/bin/bash action.sh ' . $ACTION . ' ' . $USER . ' ' . $PASS;
+  $command = '/bin/bash action.sh ' . $ACTION . ' ' . $USER . ' ' . $PASSFILE;

  // Execute command and give output
  $output = shell_exec($command);