Beefy Boxes and Bandwidth Generously Provided by pair Networks
We don't bite newbies here... much

Re^2: securing a remailer

by geektron (Curate)
on Oct 12, 2005 at 03:54 UTC ( #499360=note: print w/ replies, xml ) Need Help??

in reply to Re: securing a remailer
in thread securing a remailer

if user input isn't validated/untainted, newlines can be passed into the input, allowing someone to hijack the script and use it as a spam-remailer.

sure, if you're not accepting user input you could get away with it, but i don't recommend it.

Comment on Re^2: securing a remailer
Replies are listed 'Best First'.
Re^3: securing a remailer
by sgifford (Prior) on Oct 12, 2005 at 15:41 UTC
    So the solution is to validate user input. No need to throw the baby out with the bathwater. You'd have similar problems with using unvalidated input with SMTP or any other mechanism for sending mail.

    Still, if the OP finds they can replace a significant chunk of their code with a well-maintained Perl module, that seems like a pretty clear good idea.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://499360]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others meditating upon the Monastery: (11)
As of 2015-11-25 00:26 GMT
Find Nodes?
    Voting Booth?

    What would be the most significant thing to happen if a rope (or wire) tied the Earth and the Moon together?

    Results (666 votes), past polls