diff --git a/install/install.php b/install/install.php index 7a209a19..fefa81c6 100644 --- a/install/install.php +++ b/install/install.php @@ -304,10 +304,10 @@ if ($currentStep == 2 and count($systemCheckError) == 0) { // This file was generated by the easy-wi.com installer -" . '$host' . " = '" . $_POST['host'] . "'; -" . '$user' . " = '" . $_POST['user'] . "'; -" . '$db' . " = '" . $_POST['db'] . "'; -" . '$pwd' . " = '" . $_POST['pwd'] . "'; +" . '$host' . " = '" . addcslashes($_POST['host'], "'") . "'; +" . '$user' . " = '" . addcslashes($_POST['user'], "'") . "'; +" . '$db' . " = '" . addcslashes($_POST['db'], "'") . "'; +" . '$pwd' . " = '" . addcslashes($_POST['pwd'], "'") . "'; " . '$captcha' . " = 0; " . '$title' . " = ''; " . '$debug' . " = 0; @@ -329,7 +329,7 @@ if ($currentStep == 2 and count($systemCheckError) == 0) { // This file was generated by the easy-wi.com installer -$aeskey = "' . $_POST['aeskey'] . '"; +$aeskey = "' . addcslashes($_POST['aeskey'], "'") . '"; '; @fwrite($keyFp, $configdata);