php/doc-en

escapeshellarg() strips off bytes which are not valid characters (leading to file not found errors)

Fermée

#3 052 ouverte le 30 déc. 2023

 (6 commentaires) (0 réaction) (0 personne assignée)XML (882 forks)auto 404
Status: Verifiedgood first issue

Métriques du dépôt

Stars
 (596 étoiles)
Métriques de merge PR
 (Merge moyen 99j 23h) (90 PRs mergées en 30 j)

Description

Description

It seems escapeshellarg() strips off bytes which are >= 128 probably because they are not valid UTF-8 characters.

Because it's not possible to provide an encoding to escapeshellarg() and this behaviour is not documented I think it's a bug.

Also if this is expected behaviour then which function could be used instead? There is no other function which could do this.

Please note that the code example runs on Linux only because Windows (probably) doesn't have the cat command. Also I tested this on Linux only. Also note it's not necessary to close the php tag.

<?php
$fname = "asdf.txt".chr(128);
file_put_contents($fname, "hey!");
$cmd = "cat ".escapeshellarg($fname);
echo "cmd: $cmd\n";
passthru($cmd);

Resulted in this output:

cmd: cat 'asdf.txt'
cat: asdf.txt: No such file or directory

But I expected this output instead:

cmd: cat 'asdf.txt'$'\200'
hey!

PHP Version

PHP 8.2.7 (cli) (built: Jun 9 2023 19:37:27) (NTS)

Operating System

Debian GNU/Linux 12 (bookworm)

Guide contributeur