From: Pierre Habouzit (MadCoder <pierre.habouzit@m4x.org>
Date: Thu, 30 Dec 2004 15:06:37 +0000 (+0000)
Subject: backport
X-Git-Tag: xorg/old~547
X-Git-Url: http://git.polytechnique.org/?a=commitdiff_plain;h=d612d16cb792cf1e95012c38e3d60f5e0fab4180;p=platal.git

backport

Patches applied:

 * opensource@polytechnique.org--2005/platal--release--0.9.3--patch-14
   fix xface for once


git-archimport-id: opensource@polytechnique.org--2005/platal--mainline--0.9--patch-201
---

diff --git a/htdocs/banana/xface.php b/htdocs/banana/xface.php
index e83e9b2..98078c3 100644
--- a/htdocs/banana/xface.php
+++ b/htdocs/banana/xface.php
@@ -1,8 +1,9 @@
 <?php
 
-$face = base64_decode(Env::get('face'));
-$face = ereg_replace("'", "'\\''", $face);
+$face = base64_decode($_REQUEST['face']);
+$face = escapeshellarg($face);
 
 header("Content-Type: image/png");
-passthru("echo '$face'|uncompface -X |convert xbm:- png:-");
+passthru("echo $face|uncompface -X |convert xbm:- png:-");
+
 ?>