[BUGFIX] Shell command arguments are not escaped
authorDmitry Dulepov <dmitry@typo3.org>
Mon, 21 Nov 2011 14:54:52 +0000 (16:54 +0200)
committerSteffen Ritter <info@rs-websystems.de>
Wed, 7 Mar 2012 19:39:37 +0000 (20:39 +0100)
commita1cd99f5394c3774902f260a8f6714441f958204
tree78e7041cd5cd050a8a1edfea8983ff69ab1a90a7
parent95c1f5f56586d835669c22e56c04bf2635853002
[BUGFIX] Shell command arguments are not escaped

Shell command arguments should be escaped with escapeshellarg()
PHP function, which adds single quotes around the argument and
escapes all single quotes inside the argument.

Change-Id: I4fb655e6496e1d0f09d6386831daa8d2f7a95351
Resolves: #31278
Releases: 4.7, 4.6, 4.5
Reviewed-on: http://review.typo3.org/6779
Reviewed-by: Oliver Hader
Reviewed-by: Tolleiv Nietsch
Tested-by: Tolleiv Nietsch
Reviewed-by: Andy Grunwald
Reviewed-by: Wouter Wolters
Reviewed-by: Steffen Ritter
Tested-by: Steffen Ritter
t3lib/class.t3lib_extfilefunc.php