escapeshellarg
| From: | Mohamed CHAARI | Date: | Mon, 14 May 2007 09:03:04 +0000 |
| Subject: | escapeshellarg | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-254913@lists.php.net to get a copy of this message | ||
Hi all,
I have to execute an external command, with an argument (filename or directory name) given by user input (via a form), ie something like this:
exec('ls $_POST[...]')
what do you think about using escapeshellarg() function in this case ? can I rely on it to have a secure solution ? or is there a risk ? ...
thank you.
--
---
--Mohamed CHAARI (mailto : mohamed.chaari@st.com)
STMicroelectronics - Tunis - HPC/STS Division
Phone: (+216) 70 10 52 09 - TINA: 157 5209