в 10:37, 26 мая 2010

2010-05-26T10:37:32Z

Admin: 1 версия

2010-05-26T07:08:01Z

1 версия

Новая страница

==Escaping shell metacharacters==



<source lang="html4strict">

<?php
system("ls -al ".escapeshellarg($directory));
system(escapeshellcmd($ls_program)." -al");
?>

</source>

==Escaping User Input with the escapeshellcmd() Function==



<source lang="html4strict">

<html>
<head>
<title>Escaping user input with the escapeshellcmd() function</title>
</head>
<body>
<div>
<form action="<?php print $PHP_SELF ?>" method="post">
<p>
<input type="text" value="<?php print $_REQUEST["manpage"] ?>" name="manpage" />
</p>
</form>
<pre>
<?php
if ( isset( $_REQUEST["manpage"] ) ) {
$manpage = escapeshellcmd( $_REQUEST["manpage"] );
system( "man $manpage | col -b" );
}
?>
</pre>
</div>
</body>
</html>

</source>

==Executing df and displaying the results==



<source lang="html4strict">

<?php
exec(escapeshellcmd("df"),$output_lines,$return_value);
echo ("Command returned a value of $return_value.");
echo "</pre>";
foreach ($output_lines as $output) {
echo "$o";
}
echo "</pre>";
?>

</source>

==string escapeshellcmd ( string command ) escapes special characters in shell commands==



<source lang="html4strict">

$_GET["search"] = escapeshellcmd($_GET["search"]);
passthru("grep {$_GET["search"] /var/www/meetinglogs/*");

</source>

← Предыдущая	Версия 10:37, 26 мая 2010
(нет различий)

PHP/Utility Function/escapeshellcmd - История изменений

в 10:37, 26 мая 2010

Admin: 1 версия