From 915d1fad6706564c7e9aee02e860577e03008302 Mon Sep 17 00:00:00 2001 From: Ted Trask Date: Wed, 21 Jan 2009 22:04:37 +0000 Subject: Added escapespecialcharacters to format.lua to escape shell special characters. Reviewed all calls to io.popen and os.execute to escape special characters. Fixed file uploads in openssl and ipsectools with viewfunctions.lua. Tried to fix openssl renew when subject contains special characters, but not done yet. git-svn-id: svn://svn.alpinelinux.org/acf/tinydns/trunk@1687 ab2d0c66-481e-0410-8bed-d214d4d58bed --- tinydns-model.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tinydns-model.lua') diff --git a/tinydns-model.lua b/tinydns-model.lua index 6b77acc..602f416 100644 --- a/tinydns-model.lua +++ b/tinydns-model.lua @@ -309,7 +309,7 @@ function remove_file(self, path, userid) if not (fs.is_file(path)) then errtxt = "File doesn't exist!" elseif (validfilename(path)) then - local cmd, errors = io.popen( "/bin/rm " .. path, r ) + local cmd, errors = io.popen( "/bin/rm " .. format.escapespecialcharacters(path), r ) local cmdoutput = cmd:read("*a") cmd:close() success = "File Deleted" -- cgit v1.2.3