Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

libs/sys: properly handle passwords with apostrophes

Browse source
This commit is contained in:
Jo-Philipp Wich 2011-01-25 12:51:41 +00:00
parent dc0688dbbc
commit 9c03a76fc2
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
libs/sys/luasrc/sys.lua
View file

@ -604,16 +604,17 @@ end
-- @return Number containing 0 on success and >= 1 on error -- @return Number containing 0 on success and >= 1 on error
function user.setpasswd(username, password) function user.setpasswd(username, password)
if password then if password then
password = password:gsub("'", "") password = password:gsub("'", [['"'"']])
end end
if username then if username then
username = username:gsub("'", "") username = username:gsub("'", [['"'"']])
end end
local cmd = "(echo '"..password.."';sleep 1;echo '"..password.."')|" return os.execute(
cmd = cmd .. "passwd '"..username.."' >/dev/null 2>&1" "(echo '" .. password .. "'; sleep 1; echo '" .. password .. "') | " ..
return os.execute(cmd) "passwd '" .. username .. "' >/dev/null 2>&1"
)
end end