Text Escaping - Security??

[agriz]

IM Version : 7.0.2

Code: Select all

convert -size 500x400 xc:none -fill white -stroke black -pointsize 20 -gravity center -annotate 0  "Some Text" output.gif

It is working good.

I\'m a boy
\"I\" \'m a boy

These are working.

\"I\" \'m a boy %d ==>

I am getting only "I" 'm a boy in the image. %d is missing.
What characters should be escaped. What are the security problem if i miss a escape?

[agriz]

Please give me the list of special characters

[snibgo]

For % escapes, see http://www.imagemagick.org/script/escape.php . "%d" is the directory component of the given filename, so will often be blank.

For escapes generally, see http://www.imagemagick.org/Usage/text/#escape_chars

[agriz]

Is it possible to break and hack my above command if i just escape single and double quotes?
How can i escape #?

I am not able to escape the following two special characters.
# and &

[snibgo]

I am not able to escape the following two special characters.
# and &

Those characters are not special, to ImageMagick. In bash, provided they are within quotes, there is no need to escape them.

[agriz]

ok.

Another, final (might be ) problem.

"convert -size 500x400 xc:none -fill white -stroke black -pointsize 20 -gravity center -annotate 0 \"Some Text\" output.gif"



\"I\" \'m a boy => working (Double quotes is opened and close and working)
\"I am boy => not working (Double quotes is opened and not closed. Not working)

[snibgo]

Please show the full commands you say are working or not working.

[agriz]

Code: Select all

$text = addslashes("I am a boy") => working;
$text = addslashes("I am a boy) => not working;

exec("convert -size 500x400 xc:none -fill white -stroke black -pointsize 20 -gravity center -annotate 0 \"".$text."\" output.gif");

[snibgo]

$text = addslashes("I am a boy)

Is this PHP? I suppose that is not a valid PHP statement.

[agriz]

I was getting that text from $_REQUEST['text']
That was not a valid php statement.

<input name="text" type="text" value=""I am a boy" />

$text = addslashes($_REQUEST['text']);