Beefy Boxes and Bandwidth Generously Provided by pair Networks
Think about Loose Coupling
 
PerlMonks  

Re^3: Security issue and solution for terminal command accessed by public user

by pemungkah (Priest)
on Jul 08, 2012 at 16:43 UTC ( #980594=note: print w/ replies, xml ) Need Help??


in reply to Re^2: Security issue and solution for terminal command accessed by public user
in thread Security issue and solution for terminal command accessed by public user

I would, if you decide to go that route, carefully comment why you're doing it that way, so someone doesn't later come along and decide it would be more "efficient" to change it to

system "$unaltered_user_input";
and open you up to the security issues again.

I might also ask, will you really need every conversion that units can do? Or do you have a small set of conversions that can be encapsulated in a few dozen lines at the most? The investment in a bit of conversion code that is definitely safe, versus a security problem waiting to happen, is probably worth it.


Comment on Re^3: Security issue and solution for terminal command accessed by public user
Download Code

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://980594]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others meditating upon the Monastery: (10)
As of 2014-08-28 11:48 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    The best computer themed movie is:











    Results (259 votes), past polls