note 34879 added to function.escapeshellarg

You should use stripslashes() on the input before sending it to escapeshellarg() if magic_quotes_gpc is on. Also, escapeshellarg() adds quotes around multiple words, so you don't need to do so yourself when constructing a command for system(). ---- Manual Page -- http://www.php.net/manual/en/function.escapeshellarg.php Edit Note -- http://master.php.net/manage/user-notes.php?action=edit+34879 Delete Note -- http://master.php.net/manage/user-notes.php?action=delete+34879&report=yes Reject Note -- http://master.php.net/manage/user-notes.php?action=reject+34879&report=yes