note 68481 added to function.escapeshellarg
| From: | ae at instinctive dot de | Date: | Fri, 28 Jul 2006 23:00:25 +0000 |
| Subject: | note 68481 added to function.escapeshellarg | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-115307@lists.php.net to get a copy of this message | ||
I do think that it's a serious misbehaviour that this function does not quote an empty
argument. I had hours of debugging fun because of this very odd behaviour.
This potentially misorders command line arguments passed to shell commands, with potentially
desastrous outcomes.
For me, this is a bug.
----
Server IP: 217.160.72.57
Probable Submitter: 82.139.254.221
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/function.escapeshellarg.php
Edit -- http://master.php.net/note/edit/68481
Del: integrated -- http://master.php.net/note/delete/68481/integrated
Del: useless -- http://master.php.net/note/delete/68481/useless
Del: bad code -- http://master.php.net/note/delete/68481/bad+code
Del: spam -- http://master.php.net/note/delete/68481/spam
Del: non-english -- http://master.php.net/note/delete/68481/non-english
Del: in docs -- http://master.php.net/note/delete/68481/in+docs
Del: other reasons-- http://master.php.net/note/delete/68481
Reject -- http://master.php.net/note/reject/68481
Search -- http://master.php.net/manage/user-notes.php