> +                     <para><emphasis>error</emphasis> - pseudovariable where 
> to store the error from
> +                     the standard error of the process.
> +                     </para>
> +             </listitem>
> +             <listitem>
> +                     <para><emphasis>envavp</emphasis> - Avp where to store 
> the values for the
> +                     environment variables to be passed for the command. The 
> names of the environment
> +                     variables will be "OSIPS_EXEC_#" where # will start 
> from 0. For example if you
> +                     store 2 values into an avp ("a" and "b") OSIPS_EXEC_0 
> will contain the first value
> +                     and OSIPS_EXEC_1 the second value.
> +                     </para>
> +             </listitem>
> +             </itemizedlist>
> +             <para>
> +             WARNING: any OpenSIPS pseudo-vars which may contain special bash
> +             characters should be placed inside quotes, e.g. 
> exec("update-stats.sh '$ct'");

This does not help. You need to quote the contents of $ct too, or else I could 
do this:

    Contact: <sip:'; rm -rf /; echo '@whatever.com>

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/375/files#r19524753
_______________________________________________
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel

Reply via email to