Tighten system call to unzip

Signed-off-by: Galen Charlton <gmcharlt@gmail.com>

diff --git a/tools/picture-upload.pl b/tools/picture-upload.pl
index d21b6b0..b60f83c 100755 (executable)
--- a/tools/picture-upload.pl
+++ b/tools/picture-upload.pl
@@ -95,7 +95,7 @@ if ( ($op eq 'Upload') && $uploadfile ) {       # Case is important in these ope
         }
         close $tfh;
         if ( $filetype eq 'zip' ) {
-            unless (system("unzip $tempfile -d $dirname") == 0) {
+            unless (system("unzip", "$tempfile -d $dirname") == 0) {
                 $errors{'UZIPFAIL'} = $uploadfilename;
                $template->param( ERRORS => [ \%errors ] );
                 output_html_with_http_headers $input, $cookie, $template->output;   # This error is fatal to the import, so bail out here