[PEPr] Comment on Networking::Net_Nmap
| From: | David Jean Louis | Date: | Mon, 10 Mar 2008 12:38:48 +0000 |
| Subject: | [PEPr] Comment on Networking::Net_Nmap | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-49355@lists.php.net to get a copy of this message | ||
David Jean Louis (http://pear.php.net/user/izi) has commented on the proposal for
Networking::Net_Nmap.
Comment:
oh I forgot: you should use escapeshellcmd() for all data that can be
passed to the command line, this will prevent things like:
<?php
$target = array('127.0.0.1', '&& rm -f /some/critical/files #');
$nmap = new Net_Nmap();
$nmap->scan($target);
?>
Proposal information:
http://pear.php.net/pepr/pepr-proposal-show.php?id=539
--
Sent by PEPr, the automatic proposal system at http://pear.php.net