Init commit

LICENSE

@@ -0,0 +1,24 @@
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>

README.md

@@ -0,0 +1,35 @@
+# phpquoteshellarg
+
+php quote shell arguments function
+... doing a better job than php's builtin escapeshellarg(): https://3v4l.org/Hkv7h
+
+Developed by https://github.com/divinity76/phpquoteshellarg
+
+# installation
+the script is just a standalone .php file, you can just copypaste it. 
+
+another alternative is to use composer:
+```
+composer require 'hestiacp/phpquoteshellarg'
+```
+# usage
+
+```
+<?php
+require_once(__DIR__ . '/vendor/autoload.php');
+use function Hestiacp\quoteshellarg\quoteshellarg;
+
+$str="æøå\x01";
+var_dump(["str"=>$str,"escapeshellarg"=>escapeshellarg($str), "quoteshellarg"=>quoteshellarg($str)]);
+```
+may outputs something like
+```
+array(3) {
+  ["str"]=>
+  string(7) "æøå
"
+  ["escapeshellarg"]=>
+  string(3) "'
'"
+  ["quoteshellarg"]=>
+  string(9) "'æøå
'"
+}
+```

composer.json

@@ -0,0 +1,14 @@
+{
+    "name": "brepo/phpquoteshellarg",
+    "description": "Improved escape shell arguments for support of special charactars",
+    "keywords": ["quoteshellarg", "escapeshellarg"],
+    "homepage": "https://dev.brepo.ru/bayrepo/hestiacp",
+    "type": "library",
+    "license": "Unlicense",
+    "require": {
+        "php": ">=8.0"
+    },
+    "autoload": {
+	"files":["src/Hestiacp/quoteshellarg/quoteshellarg.php"]
+    }
+}

src/Hestiacp/quoteshellarg/quoteshellarg.php

@@ -0,0 +1,40 @@
+<?php
+declare (strict_types = 1);
+namespace Hestiacp\quoteshellarg;
+
+/**
+ * quotes shell arguments
+ * (doing a better job than escapeshellarg)
+ *
+ * @param string|int|float $arg
+ * @throws UnexpectedValueException if $arg contains null bytes
+ * @return string
+ */
+
+function quoteshellarg(string | int | float $arg): string
+{
+    if (\is_float($arg)) {
+        // 17: >The 53-bit significand precision gives from 15 to 17 significant decimal digits precision.
+        return \escapeshellarg(\sprintf('%.17g', $arg));
+    }
+    if (\is_int($arg)) {
+        return \escapeshellarg((string) $arg);
+    }
+    static $isUnix = null;
+    if ($isUnix === null) {
+        $isUnix = \in_array(PHP_OS_FAMILY, array('Linux', 'BSD', 'Darwin', 'Solaris'), true) || PHP_OS === 'CYGWIN';
+    }
+    if ($isUnix) {
+        // PHP's built-in escapeshellarg() for unix is kindof garbage: https://3v4l.org/Hkv7h
+        // corrupting-or-stripping UTF-8 unicode characters like "æøå" and non-printable characters like "\x01",
+        // both of which are fully legal in unix shell arguments.
+        // In single-quoted-unix-shell-arguments there are only 2 bytes that needs special attention: \x00 and \x27
+        if (false !== \strpos($arg, "\x00")) {
+            throw new \UnexpectedValueException('unix shell arguments cannot contain null bytes!');
+        }
+        return "'" . \strtr($arg, array("'" => "'\\''")) . "'";
+    }
+    // todo: quoteshellarg for windows? it's a nightmare though: https://docs.microsoft.com/en-us/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way
+    // fallback to php's builtin escapeshellarg
+    return \escapeshellarg($arg);
+}