Skip to content

Commit

Permalink
Allow asterisk in chkValue()
Browse files Browse the repository at this point in the history
Used in MPD Config
  • Loading branch information
moodeaudio committed Aug 13, 2024
1 parent 73b6158 commit 6d129db
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion www/inc/common.php
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@ function chkValue($value) {
$shellCmds = array('base64', 'bash', 'sudo');

// Only allow empty or valid characters
if (empty($value) || preg_match('|^[A-Za-z0-9 /@=()+:_.,-]+$|', $value)) {
if (empty($value) || preg_match('|^[A-Za-z0-9 /*@=()+:_.,-]+$|', $value)) {
// Check for directory traversal: ../
if (substr_count($value, '..') > 0) {
$valid = false;
Expand Down

0 comments on commit 6d129db

Please sign in to comment.