search

figshare / Total-Impact

Uncovering the invisible impacts of your research.
http://total-impact.org
Other
43 stars 4 forks source link

Improve python code execution within PHP #6

Closed cdparra closed 13 years ago

cdparra commented 13 years ago

Find a better way of executing python code within PHP or re-implement python plugins in PHP so that we will not need this.

As it is now (with exec) is very unsafe and could be a door open for code injection attacks.

jasonpriem commented 13 years ago

This should be as simple as escaping the input, which is addressed by #13