3 ms·
The motto of PHP devs is apparently "FKIN ESCAPING, HOW DOES IT WORK?". Use escapeshellarg, kids.
by al2o3cr 13y ago
The motto of PHP devs is apparently "FKIN ESCAPING, HOW DOES IT WORK?". Use escapeshellarg, kids.
- code_duck 13y agoI didn't intend for this to represent the entire code for the search function. I've never written a php page that did something unsafe with user input. After all, '$terms' is not not $_GET['terms'] in my silly example. It's not defined.
- mcguire 13y agoescapeshellarg misses some cases. You need to use escapeshellarg_fixed.
- jrockway 13y agoreal_escapeshellarg_fixed, you mean.