Ignore:
Timestamp:
06/18/09 11:49:04 (15 years ago)
Author:
rafaelraymundo
Message:

Ticket #550 - Escapando comandos que são executados no shell na função "insert_mail".

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/expressoMail1_2/inc/class.imap_functions.inc.php

    r1005 r1012  
    29442944                fputs($f,base64_encode($source)); 
    29452945            fclose($f); 
    2946             $command = "python ".$_SERVER['DOCUMENT_ROOT']."expressoMail1_2/imap.py ".$imap_server." ".$imap_port." ".$username." ".$password." ".$timestamp." ".$folder." ".$file; 
    2947             $return['command']=exec($command); 
     2946            $command = "python ".$_SERVER['DOCUMENT_ROOT']."expressoMail1_2/imap.py ".escapeshellarg($imap_server)." ".escapeshellarg($imap_port)." ".escapeshellarg($username)." ".escapeshellarg($password)." ".escapeshellarg($timestamp)." ".escapeshellarg($folder)." ".escapeshellarg($file); 
     2947            $return['command']=exec(escapeshellcmd($command)); 
    29482948        }else{ 
    29492949            $return['append'] = imap_append($mbox_stream, "{".$imap_server.":".$imap_port."}".$folder, $source, "\\Seen"); 
Note: See TracChangeset for help on using the changeset viewer.