Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?

RE: Re: File Naming

by Anonymous Monk
on Aug 01, 2000 at 10:02 UTC ( #25413=note: print w/replies, xml ) Need Help??

in reply to Re: File Naming
in thread File Naming

sub secure_query { $_ = shift; s/\-+(.*)/$1/g; s/(.*)[ \t]+\-(.*)/$1$2/g; tr/\$\'\`\"\<\>\/\;\!\|/_/; return($_); }#End secure_query

Replies are listed 'Best First'.
RE: RE: Re: File Naming
by Fastolfe (Vicar) on Aug 01, 2000 at 22:49 UTC
    This is probably a little simpler and a lot safer:
    $had_bad_characters = $user =~ s/\W//g; # Safer still (since what's defined as a 'word character' could change + based on locale/Unicode (?)) $user =~ s/[^a-zA-Z_-]//g; # Explicitely define what we want to ACCE +PT as valid
    Generally the secure approach involves defining what is acceptable and disallowing everything else, not trying to filter out what we know/anticipate to be bad, because stuff frequently slips through.

Log In?

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://25413]
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others about the Monastery: (5)
As of 2023-12-04 12:55 GMT
Find Nodes?
    Voting Booth?
    What's your preferred 'use VERSION' for new CPAN modules in 2023?

    Results (25 votes). Check out past polls.