[OpenSIPS-Devel] [opensips] added exec(cmd, output, input, error, avpenv) function for exec (#375)

[Walter Doekes]

> +			<para><emphasis>error</emphasis> - pseudovariable where to store the error from
> +			the standard error of the process.
> +			</para>
> +		</listitem>
> +		<listitem>
> +			<para><emphasis>envavp</emphasis> - Avp where to store the values for the
> +			environment variables to be passed for the command. The names of the environment
> +			variables will be "OSIPS_EXEC_#" where # will start from 0. For example if you
> +			store 2 values into an avp ("a" and "b") OSIPS_EXEC_0 will contain the first value
> +			and OSIPS_EXEC_1 the second value.
> +			</para>
> +		</listitem>
> +		</itemizedlist>
> +		<para>
> +		WARNING: any OpenSIPS pseudo-vars which may contain special bash
> +		characters should be placed inside quotes, e.g. exec("update-stats.sh '$ct'");

This does not help. You need to quote the contents of $ct too, or else I could do this:

    Contact: <sip:'; rm -rf /; echo '@whatever.com>

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/375/files#r19524753
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/devel/attachments/20141029/892948db/attachment-0001.htm>