From d612d16cb792cf1e95012c38e3d60f5e0fab4180 Mon Sep 17 00:00:00 2001
From: "Pierre Habouzit (MadCoder" <pierre.habouzit@m4x.org>
Date: Thu, 30 Dec 2004 15:06:37 +0000
Subject: [PATCH] backport

Patches applied:

 * opensource@polytechnique.org--2005/platal--release--0.9.3--patch-14
   fix xface for once


git-archimport-id: opensource@polytechnique.org--2005/platal--mainline--0.9--patch-201
---
 htdocs/banana/xface.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/htdocs/banana/xface.php b/htdocs/banana/xface.php
index e83e9b2..98078c3 100644
--- a/htdocs/banana/xface.php
+++ b/htdocs/banana/xface.php
@@ -1,8 +1,9 @@
 <?php
 
-$face = base64_decode(Env::get('face'));
-$face = ereg_replace("'", "'\\''", $face);
+$face = base64_decode($_REQUEST['face']);
+$face = escapeshellarg($face);
 
 header("Content-Type: image/png");
-passthru("echo '$face'|uncompface -X |convert xbm:- png:-");
+passthru("echo $face|uncompface -X |convert xbm:- png:-");
+
 ?>
-- 
2.1.4