note 67107 added to function.popen

From: Date: Sat, 03 Jun 2006 11:45:13 +0000
Subject: note 67107 added to function.popen
Groups: php.notes 
Request: Send a blank email to php-notes+get-113093@lists.php.net to get a copy of this message
If you are going to allow data coming from user input to be passed to this function, then you should keep in mind the following warning that also applies to exec() and system(): http://www.php.net/manual/en/function.exec.php http://www.php.net/manual/en/function.system.php Warning: If you are going to allow data coming from user input to be passed to this function, then you should be using escapeshellarg() or escapeshellcmd() to make sure that users cannot trick the system into executing arbitrary commands. ---- Server IP: 66.163.161.117 Probable Submitter: 84.174.157.204 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/function.popen.php Edit -- http://master.php.net/note/edit/67107 Del: integrated -- http://master.php.net/note/delete/67107/integrated Del: useless -- http://master.php.net/note/delete/67107/useless Del: bad code -- http://master.php.net/note/delete/67107/bad+code Del: spam -- http://master.php.net/note/delete/67107/spam Del: non-english -- http://master.php.net/note/delete/67107/non-english Del: in docs -- http://master.php.net/note/delete/67107/in+docs Del: other reasons-- http://master.php.net/note/delete/67107 Reject -- http://master.php.net/note/reject/67107 Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#113093) next »