--- ../new/libphp-snoopy-1.2.3/Snoopy.class.php 2005-11-08 06:55:33.000000000 +0000 +++ Snoopy-1.2.4/Snoopy.class.php 2008-10-22 15:40:48.000000000 +0000 @@ -1012,8 +1006,7 @@ $headerfile = tempnam($temp_dir, "sno"); - $safer_URI = strtr( $URI, "\"", " " ); // strip quotes from the URI to avoid shell access - exec($this->curl_path." -D \"$headerfile\"".$cmdline_params." \"".$safer_URI."\"",$results,$return); + exec($this->curl_path." -k -D \"$headerfile\"".$cmdline_params." \"".escapeshellcmd($URI)."\"",$results,$return); if($return) {