New answers tagged

1

Security Command injection I made a small patch by disabling the characters " " (space), "&", and "|". This can easily be bypassed. Example: url=http://example.com/;id;?%26x=y; Other relevant characters include - but are not limited to - $, ```, etc. As mentioned in the comments, you should use escapeshellarg instead (input filtering is quite ...


1

Spaces My first read of this code: "The \"test\" command, as well as the \"[\" command, are not required to know", "the \"==\" operator. Only a few implementations like bash and some", "versions of ksh support it.", was wrong; I didn't notice that it's actually a varargs-function accepting one line per argument. That's a little odd. This has ...


1

Initial thoughts I must admit I hadn't heard of the youtube-dl program but it seems quite nifty. Perhaps it was what many of the websites I have seen for downloading YT videos use behind the scenes. I tried using the script locally and found that the URL must contain an ampersand (i.e. have 2+ query string variables), otherwise the logic to look for a ...


Top 50 recent answers are included