From a647a9e422f73fbb2421e9f396a05230b731bddb Mon Sep 17 00:00:00 2001
From: Florian Pritz <bluewind@xssn.at>
Date: Thu, 20 May 2010 13:29:46 +0200
Subject: add missing escapeshellarg()

Signed-off-by: Florian Pritz <bluewind@xssn.at>
---
 system/application/models/file_mod.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'system/application')

diff --git a/system/application/models/file_mod.php b/system/application/models/file_mod.php
index 6c35a8738..efb30005a 100644
--- a/system/application/models/file_mod.php
+++ b/system/application/models/file_mod.php
@@ -178,7 +178,7 @@ class File_mod extends Model {
           // count(file($file)); isn't
           echo shell_exec('/usr/bin/seq 1 $(/usr/bin/wc -l '.escapeshellarg($file).' | /bin/cut -d\  -f1) | sed -r \'s/^(.*)$/<a href="#n\1" class="no" name="n\1" id="n\1">\1<\/a>/g\'');
           echo '</pre></td><td class="code"><pre>'."\n";
-          echo shell_exec(FCPATH.'scripts/syntax-highlighting.sh '.$filedata['filename'].'.'.$mode.' < '.escapeshellarg($file));
+          echo shell_exec(FCPATH.'scripts/syntax-highlighting.sh '.escapeshellarg($filedata['filename']).'.'.escapeshellarg($mode).' < '.escapeshellarg($file));
           echo $this->load->view('file/html_footer', $data, true);
         } else {
           if ($mode == 'plain') {
-- 
cgit v1.2.3-24-g4f1b