WIP: forgot to put back: escape hell args

NicolasRannou · Dec 2, 2011 · 33b803f · 33b803f
1 parent 670c6dd
commit 33b803f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ajax/executecommand.php b/ajax/executecommand.php
@@ -22,9 +22,9 @@
     # clean the command
     $fullcommand = $env_vars . $command . " ../" . $image . " ../" . $newimage;
 
-    system($fullcommand);
+    system(escapeshellarg($fullcommand));
 
     #return 2 images to update visualization and show paths
     #echo $ext . " " . $realpath;
     echo $image . " " . $newimage;
-    ?>
+    ?>