escapeshell SA17779

git-svn-id: http://svn.automattic.com/wordpress/trunk@3235 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2005-11-29 14:07:30 +00:00 · 2005-11-29 14:07:30 +00:00 · 489c6c4257
parent 0ff8f49cd5
commit 489c6c4257
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/class-snoopy.php
+++ b/wp-includes/class-snoopy.php
@ -1014,7 +1014,7 @@ class Snoopy
 		$headerfile = tempnam($temp_dir, "sno");

 		$safer_URI = strtr( $URI, "\"", " " ); // strip quotes from the URI to avoid shell access
-		exec($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\"",$results,$return);
+		exec(escapeshellcmd($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\""),$results,$return);
 		
 		if($return)
 		{