note 94589 added to language.operators.execution

In response to the posters below suggesting to put a $_GET value directly through backticks: DO NOT DO THIS! I REPEAT: DO NOT, UNDER ANY CIRCUMSTANCES PUT UNSANITIZED USER INPUT THROUGH BACKTICKS! Doing this will allow anyone to execute whatever command they want on your system. Please follow the advice that is provided in the documentation page for exec(). "When allowing user-supplied data to be passed to this function, use escapeshellarg() or escapeshellcmd() to ensure that users cannot trick the system into executing arbitrary commands." ---- Server IP: 69.147.83.197 Probable Submitter: 173.206.105.75 ---- Manual Page -- http://www.php.net/manual/en/language.operators.execution.php Edit -- https://master.php.net/note/edit/94589 Del: integrated -- https://master.php.net/note/delete/94589/integrated Del: useless -- https://master.php.net/note/delete/94589/useless Del: bad code -- https://master.php.net/note/delete/94589/bad+code Del: spam -- https://master.php.net/note/delete/94589/spam Del: non-english -- https://master.php.net/note/delete/94589/non-english Del: in docs -- https://master.php.net/note/delete/94589/in+docs Del: other reasons-- https://master.php.net/note/delete/94589 Reject -- https://master.php.net/note/reject/94589 Search -- https://master.php.net/manage/user-notes.php