escapeshellarg() equiv. for cmd.exe?
| From: | Jeff Stewart | Date: | Wed, 11 Jun 2003 19:56:24 +0000 |
| Subject: | escapeshellarg() equiv. for cmd.exe? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-151129@lists.php.net to get a copy of this message | ||
I'm finding that escapeshellarg() doesn't "protect" against malicious
strings
used against Windows' shell, cmd.exe. Is there a function in PHP for
escaping strings according to the Windows shell's rules?
For example, the command separator in cmd.exe is &&.
--
Jeff S.