$user=$ARGV[1] # user the jr admin wants to change
if ($user ne "root"){
# do whatever needs to be done for this user }
(**NOTE: this is here in WAY simplistic form & theory just to
illustrate the point)
####
page.cgi?page=1
####
page.cgi?page=page.cgi%00 (%00 == '\0' escaped)
####
$file="/etc/passwd\0.txt.whatever.we.want";
die("hahaha! Caught you!) if($file eq "/etc/passwd");
if (-e $file){
open (FILE, ">$file");}
####
$insecure_data=~s/\0//g;
####
s**lil*; $*=join'',sort split q**; s;.*;grr; &&s+(.(.)).+$2$1+; $; =
qq-$_-;s,.*,ahc,;$,.=chop for split q,,,reverse;print for($,,$;,$*,$/)