http://www.perlmonks.org?node_id=1012992


in reply to Re: Unzip with password?
in thread Unzip with password?

Of course you need to make sure that $zipname and $fname contain no evil characters.

You don't if you use the array form of open:

open(ZIP,"-|","/usr/local/bin/unzip" => -P => '·······', -p => "cache/$zipname", $fname, ) || die "unzip failure";