[TYPO3-core] RFC bug: #16797: t3lib_stdGraphic::wrapFileName performs escapeshellarg even in safe_mode
Jigal van Hemert
jigal at xs4all.nl
Tue Dec 21 15:13:55 CET 2010
Hi,
This is a SVN patch request.
Type: Bugfix
BT reference: http://bugs.typo3.org/view.php?id=16797
Branches: trunk
Problem:
When safe_mode is on PHP will perform escapeshellcmd on each command
sent to the exec() function. When escapeshellarg() is performed on each
argument problem characters are escaped twice.
Solution:
only perform escapeshellarg() when safe_mode is off.
Notes:
This used to be part of #13750.
--
Jigal van Hemert
skype:jigal.van.hemert
msn: jigal at xs4all.nl
http://twitter.com/jigalvh
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 16797.patch
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20101221/5a2fd71d/attachment.asc>
More information about the TYPO3-team-core
mailing list