Issue lelas33#26: Protection du mot de passe avant de l'utiliser sur …

…la commande Bash
dricair · Nov 19, 2023 · 5886504 · 5886504
1 parent d528c99
commit 5886504
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/core/ajax/peugeotcars.ajax.php b/core/ajax/peugeotcars.ajax.php
@@ -577,7 +577,7 @@ function otp_prepare ()
   $cmd  = 'sudo /usr/bin/python3 ' . dirname(__FILE__) . '/../../3rdparty/psa_jeedom_daemon/jeedom_otp.py';
   $cmd .= ' --web-conf ';
   $cmd .= ' -m ' . $mail;
-  $cmd .= ' -P ' . $passwd;
+  $cmd .= ' -P \'' . $passwd . '\'';
   $cmd .= ' -B ' . $brandid;
   $cmd .= ' -C ' . $country;
   $cmd .= ' >> ' . log::getPathToLog('peugeotcars_otp') . ' 2>&1 &';

diff --git a/core/class/peugeotcars.class.php b/core/class/peugeotcars.class.php
@@ -95,7 +95,7 @@ public static function deamon_start($_debug = false) {
 
 				$cmd  = 'sudo /usr/bin/python3 ' . dirname(__FILE__) . '/../../3rdparty/psa_jeedom_daemon/jeedom_gateway.py';
         $cmd .= ' -m ' . config::byKey('account', 'peugeotcars');
-        $cmd .= ' -P ' . config::byKey('password', 'peugeotcars');
+        $cmd .= ' -P \'' . config::byKey('password', 'peugeotcars') . '\'';
 				$cmd .= ' >> ' . log::getPathToLog('peugeotcars_remote') . ' 2>&1 &';
 
         log::add('peugeotcars', 'info', $cmd);