Ticket #3892: mythtv-mythfilldatabase-single_quote_in_password.patch

libs/libmythtv/datadirect.cpp

@@ -985 +985 @@
     poststream << "</SOAP-ENV:Envelope>\n";
     postfile.close();
 
+    // Allow for single quotes in userid and password (shell escape)
+    password.replace('\'', "'\\''");
+    userid.replace('\'', "'\\''");
     QString command = QString(
         "wget --http-user='%1' --http-passwd='%2' --post-file='%3' "
         "--header='Accept-Encoding:gzip' %4 --output-document=- ")
@@ -1035 +1038 @@
 
     QString command = QString("wget --http-user='%1' --http-passwd='%2' "
                               "--post-file='%3' %4 --output-document='%5'")
-        .arg(GetUserID()).arg(GetPassword()).arg(GetPostFilename())
+        .arg(GetUserID().replace('\'', "'\\''"))
+        .arg(GetPassword().replace('\'', "'\\''")).arg(GetPostFilename())
         .arg(ddurl).arg(GetResultFilename());
 
     if (SHOW_WGET_OUTPUT)