Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-05 Thread derick
On Wed, 4 Jul 2001, Zak Greant wrote: Derick wrote: Hello Zak, regarding this problem with the mail() function, I have a fix here where the 5th parameter will be shell escaped (with php_shell_escape_cmd()). I didn't commit it yet (because of ISP troubles), but if nobody thinks this

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-05 Thread Alexander Bokovoy
On Thu, Jul 05, 2001 at 09:10:10AM +0200, [EMAIL PROTECTED] wrote: On Wed, 4 Jul 2001, Zak Greant wrote: Derick wrote: Hello Zak, regarding this problem with the mail() function, I have a fix here where the 5th parameter will be shell escaped (with php_shell_escape_cmd()). I

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-05 Thread derick
On Thu, 5 Jul 2001, Alexander Bokovoy wrote: BTW, shouldn't \x0A-\xFF be escapeable only if they aren't characters according current locale? For e-mail adresses this makes no difference if these are escaped too, I don't know about the other issues with it. regards, Derick Rethans

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-05 Thread Zak Greant
Derick wrote: As far as I can see does shell_arg only escape the ' and shell_cmd the following characters: #;`'\|*?~^()[]{}$\\\x0A\xFF so I think _shell_cmd would be the best choice. This is probably a nit-picking point that I should not have wasted your time with. :) Here was my

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-05 Thread derick
On Thu, 5 Jul 2001, Zak Greant wrote: _shell_arg single quotes a string, and converts any existing single quotes (') in the value are to '\''. This sequence temporarily ends the single-quoted string, inserts a literal single quote, and then resumes the string. Shells

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-04 Thread Derick Rethans
Hello Zak, regarding this problem with the mail() function, I have a fix here where the 5th parameter will be shell escaped (with php_shell_escape_cmd()). I didn't commit it yet (because of ISP troubles), but if nobody thinks this is a bad idea, I'll commit it tomorrow. Derick -- PHP

Re: [PHP-DEV] Bug #11890 Updated: linux exploitable

2001-07-04 Thread Zak Greant
Derick wrote: Hello Zak, regarding this problem with the mail() function, I have a fix here where the 5th parameter will be shell escaped (with php_shell_escape_cmd()). I didn't commit it yet (because of ISP troubles), but if nobody thinks this is a bad idea, I'll commit it tomorrow.