Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?
 
PerlMonks  

Re: Trojan Horse? (taint mode)

by chromatic (Archbishop)
on Nov 25, 2001 at 23:15 UTC ( #127406=note: print w/ replies, xml ) Need Help??


in reply to Trojan Horse? (taint mode)

ph3@r:

print "$\{system('echo \"hello\"')}";

Yet fear not so much:

chomp(my $input = <STDIN>); print "$input\n";
Feed this one the shell command above (a nice variable dereferencing scheme) and it'll print out literally.

Unless you're doing hazardous things with string eval, you're probably safe.


Comment on Re: Trojan Horse? (taint mode)
Select or Download Code

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://127406]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (13)
As of 2014-12-18 13:06 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    Is guessing a good strategy for surviving in the IT business?





    Results (51 votes), past polls