|
|
Posted by Curtis on 12/20/06 11:47
Also, you should be using the escapeshellarg() function on variables
passed to shell commands, especially if they contain user input. Even
register globals could be a potential problem if you're not expecting
user input.
http://php.net/escapeshellarg
On Dec 19, 4:59 pm, "johnny" <rampet...@gmail.com> wrote:
> I have the following code:
>
> exec ("find /C \"$term\" *", $command_output);
>
> Can you tell me how this string: "find /C \"$term\" *"
> will appear after excaping characters?
>
> Thank you
Navigation:
[Reply to this message]
|