5 ms·
For your safety sake I hope you're not forking a userspace imager like imagemagick. http://dummyimage.com/640x480+--gravity+Center+--text+%60cat+%2Fetc%2Fpas
by tezza 17y ago
For your safety sake I hope you're not forking a userspace imager like imagemagick.
http://dummyimage.com/640x480+--gravity+Center+--text+%60cat+%2Fetc%2Fpasswd%60
might not be too fun.
- deleted 17y ago[deleted]
- kingkool68 17y agoNope. Turns out I'm using GD's imageCreate function -> http://php.net/manual/en/function.imagecreate.php http://php.net/manual/en/function.imagecreate.php
- tezza 17y agoCool[1]... nice single purpose app BTW. My normal advice to you nifty niche App'ers is to look at long standing apps to see what they did right for revenue. Namely http://www.network-science.de/ascii/ http://www.network-science.de/ascii/ ---------------- [1] GD still has its own problems, but it seems like subscribing to secunia for GD would catch most, like this recent one :: http://secunia.com/advisories/38055/ http://secunia.com/advisories/38055/
- ori_b 17y agoIt's perfectly safe to do that; exec() doesn't reinterpret the arguments through the shell, but passes them verbatim to the program. Just make sure you don't use 'system()' (or the equivalent call in whatever your language is) to launch things. It was a bad idea from the start.