|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #26285 escapeshellarg uses wrong quotes on windows
Submitted: 2003-11-17 06:43 UTC Modified: 2003-11-19 10:32 UTC
From: jb at ez dot no Assigned: iliaa
Status: Closed Package: *General Issues
PHP Version: 4.3.3 OS: Windows
Private report: No CVE-ID:
 [2003-11-17 06:43 UTC] jb at ez dot no
The escapeshellarg function in PHP creates wrongly escaped text on 
windows. It seems it always uses the single-quote (') for escaping the 
strings, however on windows the correct way to escape is using the 
double-quote (") character. 
The same problems seems to be in the escapeshellcmd function as 

Reproduce code:
escapeshellarg( "-arg value" );

Expected result:
"-arg value" 

Actual result:
'-arg value' 


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2003-11-19 10:32 UTC]
This bug has been fixed in CVS.

In case this was a PHP problem, snapshots of the sources are packaged
every three hours; this change will be in the next snapshot. You can
grab the snapshot at
In case this was a documentation problem, the fix will show up soon at

In case this was a website problem, the change will show
up on the site and on the mirror sites in short time.
Thank you for the report, and for helping us make PHP better.

PHP Copyright © 2001-2015 The PHP Group
All rights reserved.
Last updated: Thu Nov 26 03:01:32 2015 UTC