james/fembooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add missing escaping of ffmpeg shell command during video thumbnail generation

Browse Source
This commit is contained in:
Rudolf M. Schreier 2018-08-14 11:23:09 +02:00
parent 9f3bf7d2e1
commit 2ae760b62e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ext/handle_video/main.php
View File

@ -111,7 +111,7 @@ class VideoFileHandler extends DataHandlerExtension {
else else
{ {
$scale = 'scale="' . escapeshellarg("if(gt(a,{$w}/{$h}),{$w},-1)") . ':' . escapeshellarg("if(gt(a,{$w}/{$h}),-1,{$h})") . '"'; $scale = 'scale="' . escapeshellarg("if(gt(a,{$w}/{$h}),{$w},-1)") . ':' . escapeshellarg("if(gt(a,{$w}/{$h}),-1,{$h})") . '"';
$cmd = "{$ffmpeg} -y -i {$inname} -vf {$scale} -ss 00:00:00.0 -f image2 -vframes 1 {$outname}"; $cmd = escapeshellcmd("{$ffmpeg} -y -i {$inname} -vf {$scale} -ss 00:00:00.0 -f image2 -vframes 1 {$outname}");
} }
exec($cmd, $output, $returnValue); exec($cmd, $output, $returnValue);