Changed from manual escaping to escapeshellarg in SshConnector

13 years ago · 5d7188d46e
parent e7c64170a5
commit 5d7188d46e
1 changed files with 2 additions and 2 deletions
--- a/frontend/classes/class.sshconnector.php
+++ b/frontend/classes/class.sshconnector.php
@ -101,8 +101,8 @@ class SshConnector extends CPHPBaseClass
 	
 	private function DoCommand($command, $throw_exception)
 	{
-		$command = str_replace("'", "\'", $command);
-		$command = "{$this->helper} '{$command}'";
+		$command = escapeshellarg($command);
+		$command = "{$this->helper} {$command}";
 		
 		$stream = ssh2_exec($this->connection, $command);
 		stream_set_blocking($stream, true);