diff -ru syscp-1.2.15/scripts/cron_tasks.php syscp-1.2.15s/scripts/cron_tasks.php --- scripts/cron_tasks.php 2006-11-12 16:07:18.000000000 +0100 +++ scripts/cron_tasks.php 2007-02-02 19:55:36.000000000 +0100 @@ -252,7 +252,7 @@ $htpasswd_files = array(); foreach($diroptions as $row_diroptions) { - exec( 'mkdir -p ' . $row_diroptions['path'] ); + safe_exec( 'mkdir -p ' . escapeshellarg( $row_diroptions['path'] ) ); if( is_dir( $row_diroptions['path'] ) ) { $diroptions_file .= ''."\n";