X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=gosa-core%2Finclude%2Fclass_ldap.inc;h=5d815810e9134838bb49e6f4e8d0f5f98b6e8b89;hb=f7ebf98692ee53fcfffdc91b87d81a24ac19df0e;hp=1a991f1b6e122ba7466593abe2bd1ec1336cda9a;hpb=47eed52d20d0e6f117c395614cf2dd2d3ecfc415;p=gosa.git

diff --git a/gosa-core/include/class_ldap.inc b/gosa-core/include/class_ldap.inc
index 1a991f1b6..5d815810e 100644
--- a/gosa-core/include/class_ldap.inc
+++ b/gosa-core/include/class_ldap.inc
@@ -863,7 +863,8 @@ class LDAP{
     $attrs  = (count($attributes))?implode($attributes,' '):'';
     $scope = (!empty($scope))?' -s '.$scope: '';
     $limit = (!$limit)?'':' -z '.$limit;
-    $cmd = "ldapsearch -x -LLLL '{$filter}' {$limit} {$scope} -H '{$host}' -b '{$dn}' $attrs";
+    $dn = escapeshellarg($dn);
+    $cmd = "ldapsearch -x -LLLL '{$filter}' {$limit} {$scope} -H '{$host}' -b {$dn} $attrs";
     exec($cmd, $ret,$code);
     $res = implode($ret,"\n");
     return($res);