From edb4e60478f780ed71a0cd3d224c96cbe8da92c2 Mon Sep 17 00:00:00 2001 From: busybox <29630035+busybox11@users.noreply.github.com> Date: Sat, 3 May 2025 13:34:40 +0200 Subject: [PATCH] fix(DatabaseBackupJob): escape PostgreSQL password in backup command (#5759) --- app/Jobs/DatabaseBackupJob.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Jobs/DatabaseBackupJob.php b/app/Jobs/DatabaseBackupJob.php index 1567d124b..61fe59a20 100644 --- a/app/Jobs/DatabaseBackupJob.php +++ b/app/Jobs/DatabaseBackupJob.php @@ -390,7 +390,7 @@ class DatabaseBackupJob implements ShouldBeEncrypted, ShouldQueue $commands[] = 'mkdir -p '.$this->backup_dir; $backupCommand = 'docker exec'; if ($this->postgres_password) { - $backupCommand .= " -e PGPASSWORD=$this->postgres_password"; + $backupCommand .= " -e PGPASSWORD=\"{$this->postgres_password}\""; } if ($this->backup->dump_all) { $backupCommand .= " $this->container_name pg_dumpall --username {$this->database->postgres_user} | gzip > $this->backup_location";