php/doc-en

escapeshellarg() strips off bytes which are not valid characters (leading to file not found errors)

Chiusa

#3052 aperta il 30 dic 2023

 (6 commenti) (0 reazioni) (0 assegnatari)XML (882 fork)auto 404
Status: Verifiedgood first issue

Metriche repository

Star
 (596 stelle)
Metriche merge PR
 (Merge medio 99g 23h) (90 PR mergiate in 30 g)

Descrizione

Description

It seems escapeshellarg() strips off bytes which are >= 128 probably because they are not valid UTF-8 characters.

Because it's not possible to provide an encoding to escapeshellarg() and this behaviour is not documented I think it's a bug.

Also if this is expected behaviour then which function could be used instead? There is no other function which could do this.

Please note that the code example runs on Linux only because Windows (probably) doesn't have the cat command. Also I tested this on Linux only. Also note it's not necessary to close the php tag.

<?php
$fname = "asdf.txt".chr(128);
file_put_contents($fname, "hey!");
$cmd = "cat ".escapeshellarg($fname);
echo "cmd: $cmd\n";
passthru($cmd);

Resulted in this output:

cmd: cat 'asdf.txt'
cat: asdf.txt: No such file or directory

But I expected this output instead:

cmd: cat 'asdf.txt'$'\200'
hey!

PHP Version

PHP 8.2.7 (cli) (built: Jun 9 2023 19:37:27) (NTS)

Operating System

Debian GNU/Linux 12 (bookworm)

Guida contributor