Escaping all variables passed to system commands.
Escaping all variables passed to system commands.
Escaping all variables passed to system commands plus fixed ajax loading of files in users hostdata directory.