diff --git a/html/queue/README b/html/queue/README index 44d6fe56d2..24618854b0 100644 --- a/html/queue/README +++ b/html/queue/README @@ -1,3 +1,5 @@ +// THIS SYSTEM IS NOT SUPPORTED BY BOINC. USE AT YOUR OWN RISK +// // This directory contains a system that allows // users to submit jobs to a BOINC project. // diff --git a/html/queue/user/queue_new_job_form_action.php b/html/queue/user/queue_new_job_form_action.php index de6234d906..16be833f41 100644 --- a/html/queue/user/queue_new_job_form_action.php +++ b/html/queue/user/queue_new_job_form_action.php @@ -10,7 +10,7 @@ db_init(); $timestr = time_str(time(0)); $jobapplication = post_int( 'application' ); -$jobname = escapeshellcmd( $_POST[ 'name' ] ); +$jobname = escapeshellarg( $_POST[ 'name' ] ); $jobinput = post_str( 'input' ); $jobfops = post_int( 'fops' ); $jobdisk = post_int( 'disk' );