note 34879 deleted from function.escapeshellarg by didou
| From: | didou@php.net | Date: | Sun, 10 Aug 2003 00:51:19 +0000 |
| Subject: | note 34879 deleted from function.escapeshellarg by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-53770@lists.php.net to get a copy of this message | ||
Note Submitter: bdolangavitt at wesleyan dot edu
----
You should use stripslashes() on the input before sending it to escapeshellarg() if magic_quotes_gpc
is on.
Also, escapeshellarg() adds quotes around multiple words, so you don't need to do so yourself
when constructing a command for system().