Re^2: input special characters

Replies are listed 'Best First'.
Re^3: input special characters by Anonymous Monk on Jul 13, 2014 at 15:30 UTC
If you decided to use eval, you should really consider this: `# file eval.pl use strict; use warnings; my $sep = shift @ARGV; my $evaled = eval "qq/$sep/"; print "$evaled:\n"` [download] Now the user enters this: `perl eval.pl 'hehe/; print "Hello there!\n"; unlink "./eval.pl"; q/foo +'` [download] Result: `Useless use of a constant ("hehe") in void context at (eval 1) line 1. Hello there! foo:` [download] And the eval.pl file is gone. So, yeah... as I said, eval is usually more trouble than it's worth. Maybe consider module Safe, which provides restricted eval, if you're dealing with users there (users are evil).	[reply] [d/l] [select]

Replies are listed 'Best First'.

# file eval.pl
use strict;
use warnings;

my $sep = shift @ARGV;
my $evaled = eval "qq/$sep/";
print "$evaled:\n"
[download]

perl eval.pl 'hehe/; print "Hello there!\n"; unlink "./eval.pl"; q/foo
+'
[download]

Useless use of a constant ("hehe") in void context at (eval 1) line 1.
Hello there!
foo:
[download]