Changeset 3235

Show
Ignore:
Timestamp:
11/29/05 14:07:30 (3 years ago)
Author:
ryan
Message:

escapeshell SA17779

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • trunk/wp-includes/class-snoopy.php

    r3191 r3235  
    10131013 
    10141014        $safer_URI = strtr( $URI, "\"", " " ); // strip quotes from the URI to avoid shell access 
    1015         exec($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\"",$results,$return); 
     1015        exec(escapeshellcmd($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\""),$results,$return); 
    10161016         
    10171017        if($return)