RE: [PHP] exec command part 2?
| From: | John W. Holmes | Date: | Mon, 28 Apr 2003 05:01:11 +0000 |
| Subject: | RE: [PHP] exec command part 2? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-145467@lists.php.net to get a copy of this message | ||
> Well I finally got the code working:
>
> system("keygen $macad", $result);
> print "$result";
Where is $macad coming from? If it's possible that it's coming from the
user at all, make sure it's properly escaped so you're not allowing the
user to run any command they want on your server... The escape functions
are in the same chapter as the system()/exec() functions.
---John W. Holmes...
PHP Architect - A monthly magazine for PHP Professionals. Get your copy
today. http://www.phparch.com/