note 67107 deleted from function.popen by danbrown
| From: | danbrown@php.net | Date: | Mon, 02 Mar 2009 13:42:49 +0000 |
| Subject: | note 67107 deleted from function.popen by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-151342@lists.php.net to get a copy of this message | ||
Note Submitter: php dot net_manual at reimwerker dot de
----
If you are going to allow data coming from user input to be passed to this function, then you should
keep in mind the following warning that also applies to exec() and system():
http://www.php.net/manual/en/function.exec.php
http://www.php.net/manual/en/function.system.php
Warning:
If you are going to allow data coming from user input to be passed to this function, then you should
be using escapeshellarg() or escapeshellcmd() to make sure that users cannot trick the system into
executing arbitrary commands.