[TYPO3-core] RFC bug: #16797: t3lib_stdGraphic::wrapFileName performs escapeshellarg even in safe_mode
Jigal van Hemert
jigal at xs4all.nl
Tue Dec 28 14:07:11 CET 2010
REMINDER
On 21-12-2010 15:13, Jigal van Hemert wrote:
> Hi,
>
> This is a SVN patch request.
>
> Type: Bugfix
>
> BT reference: http://bugs.typo3.org/view.php?id=16797
>
> Branches: trunk
>
> Problem:
> When safe_mode is on PHP will perform escapeshellcmd on each command
> sent to the exec() function. When escapeshellarg() is performed on each
> argument problem characters are escaped twice.
>
> Solution:
> only perform escapeshellarg() when safe_mode is off.
>
> Notes:
> This used to be part of #13750.
>
--
Kind regards / met vriendelijke groet,
Jigal van Hemert
skype:jigal.van.hemert
msn: jigal at xs4all.nl
http://twitter.com/jigalvh
More information about the TYPO3-team-core
mailing list