Beefy Boxes and Bandwidth Generously Provided by pair Networks
P is for Practical

Re:(lots of re:)Trojan Horse? (taint mode)

by cfreak (Chaplain)
on Nov 27, 2001 at 01:32 UTC ( #127629=note: print w/ replies, xml ) Need Help??

in reply to Re: Re: Re: Trojan Horse? (taint mode)
in thread Trojan Horse? (taint mode)

Opps must have foobared my test. You are correct

$a = qq|${system("echo 'hello from system'")}\n|; $a = "${system(\"echo 'hello from system'\")}\n";

do the same thing. Some how I had your example simply printing the string... hmmm

Anyway I read the author to mean to not do this:
$a = <stdin>; print "Some string with ${$a}";

But as you stated I'm finding that doesn't work, which is very strange to me. It seems as though it should, and there could be really cool uses for it.

That said, to get somewhat back on the orginal topic using taint mode is still a good idea, especially in CGI scripts. The trick is to learn what should be untainted and what doesn't have to be.

Comment on Re:(lots of re:)Trojan Horse? (taint mode)
Select or Download Code

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://127629]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others contemplating the Monastery: (4)
As of 2015-11-26 05:54 GMT
Find Nodes?
    Voting Booth?

    What would be the most significant thing to happen if a rope (or wire) tied the Earth and the Moon together?

    Results (696 votes), past polls