note 111732 deleted from language.operators.execution by salathe
| From: | salathe@php.net | Date: | Tue, 08 Oct 2019 18:30:38 +0000 |
| Subject: | note 111732 deleted from language.operators.execution by salathe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-212557@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
escapeshellarg()
if you're usimg popen, `` exec or anything else which takes a command-line
use escapeshellarg() on any variable parts, or risk being pwned.