Removed logging debug code. Changed "exec" to "execFile" to prevent shell injection.

Author: Sjoerd Tieleman

lib/config.js

@@ -40,7 +40,6 @@ var ConfigUtils = {
   },
 
   rewriteDatabaseEntry: function(config) {
-    console.log(config);
     if (typeof config.database == 'string') {
       config.database = {
         dialect: "sqlite",

lib/probe-handler.js

@@ -13,11 +13,13 @@ exports.doProbe = function(postData, callback) {
   var source_file = obj['source_file'];
 
   if (source_file) {
-    var the_process = child_process.exec(
-      config['ffprobe'] + ' -print_format json -show_format -show_streams ' + source_file,
+    var the_process = child_process.execFile(
+      config['ffprobe'],
+      ['-print_format', 'json', '-show_format', '-show_streams', source_file],
       function didFinishProbing(error, stdout, stderr) {
         if (error) {
-          callback("An error occurred while probing.", null);
+          var lastMsg = error.message.trim().split("\n").pop();
+          callback(lastMsg, null);
         } else {
           try {
             var probe = JSON.parse(stdout);