Hacker News Reader

Comment by tezza | Hacker News Reader

For your safety sake I hope you're not forking a userspace imager like imagemagick.

  http://dummyimage.com/640x480+--gravity+Center+--text+%60cat+%2Fetc%2Fpasswd%60

might not be too fun.

View on HN

It's perfectly safe to do that; exec() doesn't reinterpret the arguments through the shell, but passes them verbatim to the program.

Just make sure you don't use 'system()' (or the equivalent call in whatever your language is) to launch things. It was a bad idea from the start.

Nope. Turns out I'm using GD's imageCreate function -> http://php.net/manual/en/function.imagecreate.php

Cool[1]... nice single purpose app BTW.

My normal advice to you nifty niche App'ers is to look at long standing apps to see what they did right for revenue. Namely http://www.network-science.de/ascii/

----------------

[1] GD still has its own problems, but it seems like subscribing to secunia for GD would catch most, like this recent one :: http://secunia.com/advisories/38055/

Reply on news.ycombinator.com