Wordpress 2.7.1

[autoinstalls/wordpress.git] / wp-includes / js / tinymce / plugins / spellchecker / classes / PSpellShell.php

diff --git a/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php b/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php
index 779e837227f52103bcf21e3d59b608769f0f5a6a..7d3102c75aa6b3ffeec5d9eb9a830ddc10dc87e1 100644 (file)
--- a/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php
+++ b/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php
@@ -2,6 +2,7 @@
 /**
  * $Id: editor_plugin_src.js 201 2007-02-12 15:56:56Z spocke $
  *
+ * @package MCManager.includes
  * @author Moxiecode
  * @copyright Copyright © 2004-2007, Moxiecode Systems AB, All rights reserved.
  */
@@ -103,10 +104,10 @@ class PSpellShell extends SpellChecker {
                $this->_tmpfile = tempnam($this->_config['PSpellShell.tmp'], "tinyspell");
 
                if(preg_match("#win#i", php_uname()))
-                       return $this->_config['PSpellShell.aspell'] . " -a --lang=". $lang . " --encoding=utf-8 -H < " . $this->_tmpfile . " 2>&1";
+                       return $this->_config['PSpellShell.aspell'] . " -a --lang=". escapeshellarg($lang) . " --encoding=utf-8 -H < " . $this->_tmpfile . " 2>&1";
 
-               return "cat ". $this->_tmpfile ." | " . $this->_config['PSpellShell.aspell'] . " -a --encoding=utf-8 -H --lang=". $lang;
+               return "cat ". $this->_tmpfile ." | " . $this->_config['PSpellShell.aspell'] . " -a --encoding=utf-8 -H --lang=". escapeshellarg($lang);
        }
 }
 
-?>
+?>
\ No newline at end of file