Re^2: Perl calling Linux commands

[tmharish]

Additionally you need to look at tainted variables.

Its a really bad idea to take user input and throw it to system ( or a database ) - What if the username input was:

" || ls && 0 &&

Of course you could replace ls with whatever exciting nefarious command you choose but thats the idea ...