Re: exec

Article View: pl.comp.lang.php

Article #219871

#219871

From: porneL
Date: Sun, 26 Jul 2009 22:11

12 lines
1057 bytes

On Sun, 26 Jul 2009 08:56:02 +0100, Lech Dubrowski <337@337.com.pl> wrote:

> Co jest zle w tym zapisie
> exec("test5.php?num_rows=$row['lp']");

exec("php test5.php ".escapeshellarg($row['lp']));

Wyobraź sobie $row['lp'] = "; rm -rf /"

-- 
http://pornel.net
this.author = new Geek("porneL");

Technical Details

Message-ID: <op.uxo3w3n1utk0y1@aimac.local>

Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.gazeta.pl!not-for-mail

References: <h4h2ap$pcd$1@atlantis.news.neostrada.pl>

Show Full Headers

Complete Article Headers

Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.gazeta.pl!not-for-mail
From: porneL <niusy4@pornel.net>
Newsgroups: pl.comp.lang.php
Subject: Re: exec
Date: Sun, 26 Jul 2009 23:11:17 +0100
Organization: "Portal Gazeta.pl -> http://www.gazeta.pl"
Lines: 12
Message-ID: <op.uxo3w3n1utk0y1@aimac.local>
References: <h4h2ap$pcd$1@atlantis.news.neostrada.pl>
NNTP-Posting-Host: cpc1-acto1-2-0-cust35.4-2.cable.virginmedia.com
Mime-Version: 1.0
X-Trace: inews.gazeta.pl 1248646278 29914 82.28.217.36 (26 Jul 2009 22:11:18 GMT)
X-Complaints-To: usenet@agora.pl
NNTP-Posting-Date: Sun, 26 Jul 2009 22:11:18 +0000 (UTC)
X-User: pornelspam
User-Agent: Opera Mail/10.00 (MacIntel)
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reply to Parent Message