Changeset 1168 for wwwTweet

Timestamp:

Sep 30, 2006, 11:46:04 PM (15 years ago)

Author:

Sam Hocevar

Message:

• Use escapeshellarg() instead of escapeshellcmd().
• Increased input string limit to 40.

File:

• www/toilet.html (modified) (2 diffs)

www/toilet.html

@@ -46 +46 @@
 
 <? $submit = $_POST['submit'];
-   $text = substr($_POST['text'], 0, 30);
+   $text = substr(stripslashes($_POST['text']), 0, 40);
    $font = $_POST['font'];
    $fontlist = array('emboss', 'emboss2', 'smbraille');
@@ -67 +67 @@
   <blockquote>
     <p><pre>
-      <? exec($path.'/src/toilet -d '.$path.'/fonts -f "'.$fontlist[$font].'" "'.escapeshellcmd($text).'" | sed "s/\x1b[^m]*m//g"', &$result);
+      <? exec($path.'/src/toilet -d '.$path.'/fonts -f "'.$fontlist[$font].'" '.escapeshellarg($text).' | sed "s/\x1b[^m]*m//g"', &$result);
          foreach($result as $line)
              echo "\n".htmlspecialchars($line);