[TYPO3-core] RFC bug: #16797: t3lib_stdGraphic::wrapFileName performs escapeshellarg even in safe_mode

Jigal van Hemert jigal at xs4all.nl
Tue Dec 21 15:13:55 CET 2010


Hi,

This is a SVN patch request.

Type: Bugfix

BT reference: http://bugs.typo3.org/view.php?id=16797

Branches: trunk

Problem:
When safe_mode is on PHP will perform escapeshellcmd on each command 
sent to the exec() function. When escapeshellarg() is performed on each 
argument problem characters are escaped twice.

Solution:
only perform escapeshellarg() when safe_mode is off.

Notes:
This used to be part of #13750.

-- 
Jigal van Hemert
skype:jigal.van.hemert
msn: jigal at xs4all.nl
http://twitter.com/jigalvh

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 16797.patch
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20101221/5a2fd71d/attachment.asc>


More information about the TYPO3-team-core mailing list