Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?

Re: Re: Trojan Horse? (taint mode)

by quinkan (Monk)
on Nov 26, 2001 at 05:33 UTC ( #127457=note: print w/replies, xml ) Need Help??

in reply to Re: Trojan Horse? (taint mode)
in thread Trojan Horse? (taint mode)

The only way this is going to come and cause us grief is if we eval $a ?

But pause to consider that someone playing with your CGI script has managed to get output redirected to an executable shell script.... Which is often the aim of a malicious hack. If you don't want naughty words appearing in, for example, your system initialisation scripts, it might be a good idea to untaint everything input.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://127457]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others lurking in the Monastery: (5)
As of 2016-10-23 20:50 GMT
Find Nodes?
    Voting Booth?
    How many different varieties (color, size, etc) of socks do you have in your sock drawer?

    Results (302 votes). Check out past polls.