Changeset 3235 for trunk/wp-includes/class-snoopy.php

Timestamp:

11/29/2005 02:07:30 PM (19 years ago)

Author:

ryan

Message:

escapeshell SA17779

File:

• trunk/wp-includes/class-snoopy.php (modified) (1 diff)

trunk/wp-includes/class-snoopy.php

@@ -1015 +1015 @@
 
         $safer_URI = strtr( $URI, "\"", " " ); // strip quotes from the URI to avoid shell access
-        exec($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\"",$results,$return);
+        exec(escapeshellcmd($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\""),$results,$return);
         
         if($return)