[Lunar-commits] CVS: theedge/var/lib/lunar/functions download.lunar, 1.50, 1.51

[Jon South]

Update of /var/cvs/lunar/theedge/var/lib/lunar/functions
In directory espresso.foo-projects.org:/tmp/cvs-serv19175

Modified Files:
	download.lunar 
Log Message:
Fix for possible wget exploit


Index: download.lunar
===================================================================
RCS file: /var/cvs/lunar/theedge/var/lib/lunar/functions/download.lunar,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -d -r1.50 -r1.51
--- download.lunar	12 Dec 2004 22:56:05 -0000	1.50
+++ download.lunar	11 Jan 2005 21:52:13 -0000	1.51
@@ -197,9 +197,11 @@
    [ -n  "$ftp_proxy" ] && export  ftp_proxy=$ftp_proxy
    [ -n   "$no_proxy" ] && export   no_proxy=$no_proxy
 
+   S_FILE=$(basename $1)
+
    debug_msg "call_wget: PWD=$PWD"
-   verbose_msg "calling \"wget $WGET_CACHE $WGET_RATE $WGET_FTP_CONNECTION $WGET_RETRIES $WGET_PARTIAL $1\""
-   wget $WGET_CACHE $WGET_RATE $WGET_FTP_CONNECTION $WGET_RETRIES $WGET_PARTIAL $1
+   verbose_msg "calling \"wget $WGET_CACHE $WGET_RATE $WGET_FTP_CONNECTION $WGET_RETRIES $WGET_PARTIAL $1 --output-document $S_FILE\""
+   wget $WGET_CACHE $WGET_RATE $WGET_FTP_CONNECTION $WGET_RETRIES $WGET_PARTIAL "$1" --output-document "$S_FILE"
 }