From ea970f2adcf06a039070a4cc1bcd33ddfb29992a Mon Sep 17 00:00:00 2001 From: Tatiana Llorente Date: Mon, 26 Aug 2019 12:26:43 +0200 Subject: [PATCH] Escape the double quotes that may have the name of the module - #4503 --- pandora_console/include/ajax/module.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pandora_console/include/ajax/module.php b/pandora_console/include/ajax/module.php index 730c82c2cb..e34d287da5 100755 --- a/pandora_console/include/ajax/module.php +++ b/pandora_console/include/ajax/module.php @@ -1151,7 +1151,12 @@ if (check_login()) { } $server_name = ''; - $data[8] .= "".html_print_image('images/binary.png', true, ['border' => '0', 'alt' => '']).''; + + $modules_get_agentmodule_name = modules_get_agentmodule_name($module['id_agente_modulo']); + // Escape the double quotes that may have the name of the module. + $modules_get_agentmodule_name = str_replace('"', '\"', $modules_get_agentmodule_name); + + $data[8] .= "".html_print_image('images/binary.png', true, ['border' => '0', 'alt' => '']).''; } if ($module['estado'] == 3) {