From: Tim Starling Date: Sat, 31 Mar 2007 16:52:34 +0000 (+0000) Subject: Quote and escape the binary path. X-Git-Tag: 1.31.0-rc.0~53526 X-Git-Url: http://git.cyclocoop.org/%7B%24www_url%7Dadmin/password.php?a=commitdiff_plain;h=74bad3a6ec59a94b6b321f3f822c0ac9cde024c2;p=lhc%2Fweb%2Fwiklou.git Quote and escape the binary path. --- diff --git a/includes/DjVuImage.php b/includes/DjVuImage.php index 7872cf0d12..8033c3249d 100644 --- a/includes/DjVuImage.php +++ b/includes/DjVuImage.php @@ -220,7 +220,7 @@ class DjVuImage { function retrieveMetaData() { global $wgDjvuToXML; if ( isset( $wgDjvuToXML ) ) { - $cmd = $wgDjvuToXML . ' --without-anno --without-text ' . + $cmd = wfEscapeShellArg( $wgDjvuToXML ) . ' --without-anno --without-text ' . wfEscapeShellArg( $this->mFilename ); $xml = wfShellExec( $cmd ); } else {