note 68481 rejected from function.escapeshellarg by betz
| From: | betz@php.net | Date: | Sat, 29 Jul 2006 10:29:19 +0000 |
| Subject: | note 68481 rejected from function.escapeshellarg by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-115316@lists.php.net to get a copy of this message | ||
Note Submitter: ae at instinctive dot de
----
I do think that it's a serious misbehaviour that this function does not quote an empty
argument. I had hours of debugging fun because of this very odd behaviour.
This potentially misorders command line arguments passed to shell commands, with potentially
desastrous outcomes.
For me, this is a bug.