Using escapeshellarg() instead of quotes

This commit is contained in:
Michael Ridgway 2011-06-10 10:56:22 -04:00
parent 0b7321af78
commit 7b02384fb2

View File

@ -40,8 +40,8 @@ foreach ($deps as $dep) {
$installDir = $vendorDir.'/'.$name;
if (!is_dir($installDir)) {
system(sprintf('git clone %s "%s"', $url, $installDir));
system(sprintf('git clone %s %s', $url, escapeshellarg($installDir)));
}
system(sprintf('cd "%s" && git fetch origin && git reset --hard %s', $installDir, $rev));
system(sprintf('cd %s && git fetch origin && git reset --hard %s', escapeshellarg($installDir), $rev));
}