diff --git a/lib/terminal-xhr.php b/lib/terminal-xhr.php
index 38a4083..6cedd93 100644
--- a/lib/terminal-xhr.php
+++ b/lib/terminal-xhr.php
@@ -45,7 +45,7 @@ function returnHTMLPromptCommand($cmd) {
// If proc_open isn't enabled, display prompt, command and a message re needing this enabled
if (false === proc_open_enabled()) {
echo json_encode([
- "output" => returnHTMLPromptCommand($_REQUEST['command'] . "
Sorry but you can't use this terminal if your proc_open is disabled"),
+ "output" => returnHTMLPromptCommand($_POST['command'] . "
Sorry but you can't use this terminal if your proc_open is disabled"),
"user" => $user,
"cwd" => $cwd
]);
@@ -55,7 +55,7 @@ if (false === proc_open_enabled()) {
// If in demo mode, display message and go no further
if (true === $demoMode) {
echo json_encode([
- "output" => returnHTMLPromptCommand($_REQUEST['command'] . "
Sorry, shell usage not enabled in demo mode"),
+ "output" => returnHTMLPromptCommand($_POST['command'] . "
Sorry, shell usage not enabled in demo mode"),
"user" => $user,
"cwd" => $cwd
]);
@@ -63,9 +63,9 @@ if (true === $demoMode) {
}
// If no command, display message and go no further
-if (false === isset($_REQUEST['command'])) {
+if (false === isset($_POST['command'])) {
echo json_encode([
- "output" => returnHTMLPromptCommand($_REQUEST['command'] . "
Sorry, no command received"),
+ "output" => returnHTMLPromptCommand($_POST['command'] . "
Sorry, no command received"),
"user" => $user,
"cwd" => $cwd
]);
@@ -73,16 +73,16 @@ if (false === isset($_REQUEST['command'])) {
}
// Strip any slashes from command
-$_REQUEST['command'] = stripslashes($_REQUEST['command']);
+$_POST['command'] = stripslashes($_POST['command']);
// Start output with the prompt and command they provided last
-$output = returnHTMLPromptCommand($_REQUEST['command']);
+$output = returnHTMLPromptCommand($_POST['command']);
// If command contains cd but no dir
-if (preg_match('/^[[:blank:]]*cd[[:blank:]]*$/', $_REQUEST['command'])) {
+if (preg_match('/^[[:blank:]]*cd[[:blank:]]*$/', $_POST['command'])) {
$_SESSION['cwd'] = $cwd;
// Else cd to a dir
-} elseif (preg_match('/^[[:blank:]]*cd[[:blank:]]+([^;]+)$/', $_REQUEST['command'], $regs)) {
+} elseif (preg_match('/^[[:blank:]]*cd[[:blank:]]+([^;]+)$/', $_POST['command'], $regs)) {
// The current command is 'cd', which we have to handle as an internal shell command
$newDir = "/" === $regs[1][0] ? $regs[1] : $_SESSION['cwd'] . "/" . $regs[1];
@@ -110,15 +110,15 @@ if (preg_match('/^[[:blank:]]*cd[[:blank:]]*$/', $_REQUEST['command'])) {
// The command is not a 'cd' command
// Alias expansion
- $length = strcspn($_REQUEST['command'], " \t");
- $token = substr($_REQUEST['command'], 0, $length);
+ $length = strcspn($_POST['command'], " \t");
+ $token = substr($_POST['command'], 0, $length);
if (true === isset($aliases[$token])) {
- $_REQUEST['command'] = $aliases[$token] . substr($_REQUEST['command'], $length);
+ $_POST['command'] = $aliases[$token] . substr($_POST['command'], $length);
}
// Open a proc with array and $io return
$p = proc_open(
- $_REQUEST['command'],
+ $_POST['command'],
array(
1 => array('pipe', 'w'),
2 => array('pipe', 'w')