[TYPO3-core] RFC: bug 3299 (Language pack installation cannot handle spaces in filenames)

Michael Stucki michael at typo3.org
Wed Jul 12 22:43:52 CEST 2006


I agree. +1 though I didn't test it.

- michael

Martin Kutschker wrote:

> Karsten Dambekalns schrieb:
>> Hi.
>> 
>> Type: bugfix
>> BT ref: http://bugs.typo3.org/view.php?id=3299
>> Branch: HEAD, TYPO3_4-0
>> 
>> The subject says it all, the solution is to add escapeshellarg(), see
>> patch.
> 
> A must have. Not because of the spaces, but the security risk of doing an
> exec() without escaping the command.
> 
> Masi

-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/



More information about the TYPO3-team-core mailing list