diff options
| author | Remy <relst@relst.nl> | 2015-03-27 12:48:06 +0100 |
|---|---|---|
| committer | Remy <relst@relst.nl> | 2015-03-27 12:48:06 +0100 |
| commit | 806c7578f6249d66278b0e510137cff2096a55af (patch) | |
| tree | f50da133dece2feddb98025d7682bbe25fa88840 /functions | |
| parent | ddb3de9376b310127ee61d20b577c3d0f037b83e (diff) | |
| download | ssl-decoder-806c7578f6249d66278b0e510137cff2096a55af.zip ssl-decoder-806c7578f6249d66278b0e510137cff2096a55af.tar.gz ssl-decoder-806c7578f6249d66278b0e510137cff2096a55af.tar.bz2 | |
escape crl uri
Diffstat (limited to 'functions')
| -rw-r--r-- | functions/crl.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/functions/crl.php b/functions/crl.php index 3b76ed9..362a01c 100644 --- a/functions/crl.php +++ b/functions/crl.php @@ -43,16 +43,16 @@ function crl_verify($raw_cert_data, $verbose=true) { echo '<pre>Curl error: ' . htmlspecialchars(curl_error($ch)) ."</pre>"; } curl_close($ch); - if(stat("/tmp/" . $random_blurp . "." . $key . ".crl")['size'] < 10 ) { + if(stat("/tmp/" . $random_blurp . "." . escapeshellcmd($key) . ".crl")['size'] < 10 ) { return false; } - $crl_text = shell_exec("openssl crl -noout -text -inform der -in /tmp/" . $random_blurp . "." . $key . ".crl 2>&1"); + $crl_text = shell_exec("openssl crl -noout -text -inform der -in /tmp/" . $random_blurp . "." . escapeshellcmd($key) . ".crl 2>&1"); - $crl_last_update = shell_exec("openssl crl -noout -lastupdate -inform der -in /tmp/" . $random_blurp . "." . $key . ".crl"); + $crl_last_update = shell_exec("openssl crl -noout -lastupdate -inform der -in /tmp/" . $random_blurp . "." . escapeshellcmd($key) . ".crl"); - $crl_next_update = shell_exec("openssl crl -noout -nextupdate -inform der -in /tmp/" . $random_blurp . "." . $key . ".crl"); + $crl_next_update = shell_exec("openssl crl -noout -nextupdate -inform der -in /tmp/" . $random_blurp . "." . escapeshellcmd($key) . ".crl"); - unlink("/tmp/" . $random_blurp . "." . $key . ".crl"); + unlink("/tmp/" . $random_blurp . "." . escapeshellcmd($key) . ".crl"); if ( strpos($crl_text, "unable to load CRL") === 0 ) { if ( $verbose ) { |