From fb548cde595850914a7b0e792ba50024e1520c2d Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Tue, 14 Dec 2010 22:47:36 -0500
Subject: No need to use escapeshellcmd here.

---
 usr/local/www/pkg_mgr_install.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'usr/local/www')

diff --git a/usr/local/www/pkg_mgr_install.php b/usr/local/www/pkg_mgr_install.php
index 0295172..3424621 100755
--- a/usr/local/www/pkg_mgr_install.php
+++ b/usr/local/www/pkg_mgr_install.php
@@ -153,7 +153,7 @@ switch($_GET['mode']) {
 			update_output_window($static_output);
 			filter_configure();
 		}
-		file_put_contents("/tmp/" . escapeshellcmd($_GET['pkg'])  . ".info", $static_output);
+		file_put_contents("/tmp{$_GET['pkg']}.info", $static_output);
 		echo "<script type='text/javascript'>document.location=\"pkg_mgr_install.php?mode=installedinfo&pkg={$_GET['pkg']}\";</script>";
 		break;
 	case "installedinfo":
@@ -200,7 +200,7 @@ switch($_GET['mode']) {
 				$static_output .= "\n" . gettext("Installation completed.") . "\n{$_GET['id']} " . gettext("setup instructions") . ":\n{$status}";
 			else
 				$static_output .= "\n" . gettext("Installation completed.   Please check to make sure that the package is configured from the respective menu then start the package.");
-		file_put_contents("/tmp/" . escapeshellcmd($_GET['id'])  . ".info", $static_output);
+		file_put_contents("/tmp/{$_GET['id']}.info", $static_output);
 		echo "<script type='text/javascript'>document.location=\"pkg_mgr_install.php?mode=installedinfo&pkg={$_GET['id']}\";</script>";
 		}
 		filter_configure();
-- 
cgit v1.1