php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #45981 function escapeshellarg excessively quotes single quotes
Submitted: 2008-09-03 13:05 UTC Modified: 2008-09-03 13:39 UTC
From: jeroen at asystance dot nl Assigned:
Status: Not a bug Package: Unknown/Other Function
PHP Version: 5.2CVS-2008-09-03 (snap) OS: debian linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: jeroen at asystance dot nl
New email:
PHP Version: OS:

 

 [2008-09-03 13:05 UTC] jeroen at asystance dot nl 
Description:
------------
escapeshellarg inserts single quotes (') before and after an escaped single quote

I observed the bug in 5.2.6-3 and the php5.3-200809031030 CVS snapshot

Reproduce code:
---------------
<?php
echo escapeshellarg("single ' quote") . "\n";
echo escapeshellarg('single \' quote') . "\n";
?>

Expected result:
----------------
'single \' quote'
'single \' quote'

Actual result:
--------------
'single '\'' quote'
'single '\'' quote'

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-09-03 13:39 UTC] pajoye@php.net 
How is it supposed to know that the string argument is already escaped?

What is done in your example is not different than:

print_r(escapeshellarg(escapeshellarg("single ' quote")));

Not a bug.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Thu Jul 17 14:04:04 2025 UTC