note 67107 added to function.popen
| From: | phpdotnet_manualatreimwerkerdotde at osu1 dot php dot net | Date: | Sat, 03 Jun 2006 11:45:13 +0000 |
| Subject: | note 67107 added to function.popen | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-113093@lists.php.net to get a copy of this message | ||
If you are going to allow data coming from user input to be passed to this function, then you should
keep in mind the following warning that also applies to exec() and system():
http://www.php.net/manual/en/function.exec.php
http://www.php.net/manual/en/function.system.php
Warning:
If you are going to allow data coming from user input to be passed to this function, then you should
be using escapeshellarg() or escapeshellcmd() to make sure that users cannot trick the system into
executing arbitrary commands.
----
Server IP: 66.163.161.117
Probable Submitter: 84.174.157.204
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/function.popen.php
Edit -- http://master.php.net/note/edit/67107
Del: integrated -- http://master.php.net/note/delete/67107/integrated
Del: useless -- http://master.php.net/note/delete/67107/useless
Del: bad code -- http://master.php.net/note/delete/67107/bad+code
Del: spam -- http://master.php.net/note/delete/67107/spam
Del: non-english -- http://master.php.net/note/delete/67107/non-english
Del: in docs -- http://master.php.net/note/delete/67107/in+docs
Del: other reasons-- http://master.php.net/note/delete/67107
Reject -- http://master.php.net/note/reject/67107
Search -- http://master.php.net/manage/user-notes.php