Fix misc bugs

Storm-Eagle20 · Aug 26, 2018 · 8562b2f · 8562b2f
1 parent 687be9a
commit 8562b2f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/ntbb-session.lib.php b/lib/ntbb-session.lib.php
@@ -209,7 +209,7 @@ private function passwordVerifyInner($userid, $pass, $user) {
 
 		if (substr(@$user['email'], -1) === '@') {
 			// Forgive me, gods, for I have hardcoded way more than I really should have
-			$valResult = shell_exec("cd /var/www/html/play.pokemonshowdown.com && node lib/validate-token.js \"$pass\"");
+			$valResult = shell_exec("cd /var/www/html/play.pokemonshowdown.com && node lib/validate-token.js " . escapeshellarg($pass));
 			$payload = json_decode($valResult, true);
 			if (!$payload) return false;
 			if (strpos($payload['aud'], $psconfig['gapi_clientid']) === false) return false;

diff --git a/src/battle-animations.ts b/src/battle-animations.ts
@@ -1214,7 +1214,7 @@ class BattleScene {
 		//this.preloadImage(Tools.fxPrefix + 'bg.jpg');
 	}
 	preloadBgm(bgmNum = 0) {
-		if (!bgmNum) bgmNum = this.numericId % 13;
+		if (!bgmNum) bgmNum = 1 + this.numericId % 14;
 		this.bgmNum = bgmNum;
 
 		let ext = window.nodewebkit ? '.ogg' : '.mp3';