Fixed #41

overtrue · Jan 22, 2019 · 5550074 · 5550074
1 parent 9855b89
commit 5550074
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/src/Commands/Publish.php b/src/Commands/Publish.php
@@ -61,8 +61,8 @@ public function handle()
 
         if ('all' == $locale) {
             $files = [
-                $sourcePath.'/*',
-                $sourceJsonPath,
+                \addslashes($sourcePath).'/*',
+                escapeshellarg($sourceJsonPath),
             ];
             $message = 'all';
             $copyEnFiles = true;
@@ -83,14 +83,14 @@ public function handle()
                 }
 
                 $published[] = $filename;
-                $files[] = $file;
+                $files[] = escapeshellarg($file);
 
                 if (!file_exists($jsonFile)) {
                     $this->error("lang '$filename' not found.");
 
                     continue;
                 }
-                $files[] = $jsonFile;
+                $files[] = escapeshellarg($jsonFile);
             }
 
             if (empty($files)) {
@@ -101,10 +101,10 @@ public function handle()
         }
 
         if ($inLumen && $copyEnFiles) {
-            $files[] = base_path('vendor/laravel/lumen-framework/resources/lang/en');
+            $files[] = escapeshellarg(base_path('vendor/laravel/lumen-framework/resources/lang/en'));
         }
 
-        $files = implode(' ', \array_map('escapeshellarg', $files));
+        $files = implode(' ', $files);
         $targetPath = escapeshellarg($targetPath);
         $command = "cp -r{$force} {$files} {$targetPath}";
         $process = \method_exists(Process::class, 'fromShellCommandline') ? Process::fromShellCommandline($command) : new Process($command);