What’s the difference between escapeshellarg and escapeshellcmd?

by

Generally, you’ll want to use escapeshellarg, making a single argument to a shell command safe. Here’s why:

Suppose you need to get a list of files in a directory. You come up with the following:

$path="path/to/directory"; // From user input

$files = shell_exec('ls '.$path);
// Executes `ls path/to/directory`

(This is a bad way of doing this, but for illustration bear with me)

This works “great” for this path, but suppose the path given was something more dangerous:

$path="path; rm -rf /";

$files = shell_exec('ls '.$path);
// Executes `ls path`, then `rm -rf /`;

Because the path given was used unsanitised, any command can potentially be run. We can use the escapeshell* methods to try to prevent this.

First, using escapeshellcmd:

$path="path; rm -rf /";

$files = shell_exec(escapeshellcmd('ls '.$path));
// Executes `ls path\; rm -rf /`;

This method only escapes characters that could lead to running multiple commands, so while it stops the major security risk, it can still lead to multiple parameters being passed in.

Now, using escapeshellarg:

$path="path; rm -rf /";

$files = shell_exec('ls '.escapeshellarg($path));
// Executes `ls 'path; rm -rf /'`;

That gives us the result we want. You’ll notice it’s quoted the entire argument, so individual spaces, etc, do not need to be escaped. If the argument were to have quotes itself, they would be quoted.

To summarise, escapeshellcmd makes sure a string is only one command, while escapeshellarg makes a string safe to use as a single argument to a command.

More Related Contents:

  1. PHP shell_exec() vs exec()
  2. Checking if process still running?
  3. php in background exec() function
  4. Asynchronous shell exec in PHP
  5. How To Run PHP From Windows Command Line in WAMPServer
  6. PHP exec() vs system() vs passthru()
  7. php exec command (or similar) to not wait for result
  8. PHP StdErr after Exec()
  9. Elegant way to search for UTF-8 files with BOM?
  10. Running command-line application from PHP as specific user
  11. How to override the path of PHP to use the MAMP path?
  12. How to run PHP exec() as root?
  13. Executing a shell script from a PHP script
  14. Interactive shell using PHP
  15. Permission denied with bash.sh to run cron
  16. PHP exec – check if enabled or disabled
  17. Check if “exec” is disabled [duplicate]
  18. PHP exec $PATH variable missing elements
  19. Passing multiple PHP variables to shell_exec()? [duplicate]
  20. PHP – How to get Shell errors echoed out to screen
  21. php shell_exec() command is not working
  22. Running python script in Laravel
  23. Windows CMD.exe “The system cannot find the path specified.”
  24. Can’t execute PHP script using PHP exec
  25. exec() with timeout
  26. PHP exec() not returning error message in output
  27. Bash script to run php script
  28. How to execute a shell script in PHP?
  29. How to pass parameters from bash to php script?
  30. PHP: Why isn’t exec() returning output?

Leave a Comment