Let ejabberdctl handle more shell metacharacters

Closes #704.

diff --git a/ejabberdctl.template b/ejabberdctl.template
index 79f443890c2e4be7aa68cded13812084ef3b4af2..4704c85c4a56b7c141535c1fa2bd4ad568ed4abb 100755 (executable)
--- a/ejabberdctl.template
+++ b/ejabberdctl.template
@@ -405,7 +405,7 @@ ctl()
 ctlexec()
 {
     CONN_NAME=$1; shift
-    COMMAND=$(echo $@ | sed 's/;/\\;/g')
+    COMMAND=$(echo $@ | sed 's/["&$;\|<>()]/\\&/g')
     $EXEC_CMD "$ERL \
       $NAME ${CONN_NAME} \
       -noinput \