Inclusion of user-agent and client address on back-end shell argument.

nthnn · Nov 13, 2024 · c494a49 · c494a49
1 parent 0d9d219
commit c494a49
Showing 1 changed file with 14 additions and 2 deletions.
diff --git a/api/index.php b/api/index.php
@@ -321,7 +321,13 @@
                 return;
             }
 
-            array_push($args, $username, $password);
+            array_push(
+                $args,
+                $username,
+                $password,
+                base64_encode($_SERVER['HTTP_USER_AGENT']),
+                $_SERVER['REMOTE_ADDR']
+            );
             break;
 
         case "auth_login_email":
@@ -346,7 +352,13 @@
                 return;
             }
 
-            array_push($args, $email, $password);
+            array_push(
+                $args,
+                $email,
+                $password,
+                base64_encode($_SERVER['HTTP_USER_AGENT']),
+                $_SERVER['REMOTE_ADDR']
+            );
             break;
 
         case "auth_fetch_all":