sorry, this patch is ok
--- axfr_get.php.orig   Sat Mar 13 18:52:30 2004
+++ axfr_get.php        Sat Mar 13 19:25:42 2004
@@ -45,7 +45,8 @@
 $rand = rand();
 $file = "/tmp/$domain.$rand";
 
-$command = "/usr/local/bin/tcpclient $hostname 53 /usr/local/bin/axfr-get $domain 
$file $file.tmp 2>&1";
+$command = "/usr/local/bin/tcpclient '".escapeshellcmd($hostname)."' 53 
/usr/local/bin/axfr-get '".escapeshellcmd($domain)."' $file $file.tmp 2>&1";
+print $command."<BR>";
 exec($command, $out);
 
 // Print any errors first

Reply via email to