From 489c6c425740d1b9f892bbbce3c04fddeff5d94e Mon Sep 17 00:00:00 2001
From: ryan <ryan@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Tue, 29 Nov 2005 14:07:30 +0000
Subject: [PATCH] escapeshell SA17779

git-svn-id: http://svn.automattic.com/wordpress/trunk@3235 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/class-snoopy.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wp-includes/class-snoopy.php b/wp-includes/class-snoopy.php
index 89c3594bd1..9711a28d61 100644
--- a/wp-includes/class-snoopy.php
+++ b/wp-includes/class-snoopy.php
@@ -1014,7 +1014,7 @@ class Snoopy
 		$headerfile = tempnam($temp_dir, "sno");
 
 		$safer_URI = strtr( $URI, "\"", " " ); // strip quotes from the URI to avoid shell access
-		exec($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\"",$results,$return);
+		exec(escapeshellcmd($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\""),$results,$return);
 		
 		if($return)
 		{