escapeshellarg

[rgraves]

Hi,

I'm using escapeshellarg() to pass a username and password to an external authentication program using exec().

I'm testing to see how escapeshellarg() works and when I pass the following type of password, it seems to handle single quotes funny:

ak!L2$i\h/5&3gdf'hgj

escapeshellarg() returns the following:

'ak!L2$i\h/5&3gdf'\''hgj' (those are two single quotes after the last slash)

However it seems weird how it returns f'\''hg.... Shouldn't the single quote translate into just \' ?

I was expecting it would return 'ak!L2$i\h/5&3gdf\'hgj' instead. Am I missing something?

[kkobashi]

Are you running on Windows? According to the following bug report, Windows uses double quotes:

http://bugs.php.net/bug.php?id=26285

[rgraves]

The script is running on Apache.

[examancer]

Thats not what he asked. escapeshellarg() checks environment variables to see what operating system you are on, because you are executing the shell commands on... the shell... which is not part of your webserver. Apache has nothing to do with it.