Re^7: INSERT file contents inside a table

Try this and post the result. Be aware of the security risk of user provided data, see Calling External Commands More Safely for better solutions.

#!/usr/bin/perl
use strict;
use CGI qw(:standard);
use CGI::Carp 'fatalsToBrowser' ; # only for test

my $id = param('release');
my $cmd = "sudo /usr/bin/amavisd-release $id 2";

my $result;
if ($id =~ /^spam-[a-zA-Z0-9-]+\.gz$/) {
  $result = qx/ $cmd /;
} else {
  $result = "ERROR : Invalid id '$id'";
}

print "Content-type: text/plain\n\n";
print "$cmd\n\n$result";
[download]

poj

Comment on Re^7: INSERT file contents inside a table Download Code

Replies are listed 'Best First'.
Re^8: INSERT file contents inside a table by theravadamonk (Scribe) on Jun 07, 2018 at 05:07 UTC
Thanks once again for your effort to rewrite the code. Anyway, Why I need below line. NOW, I DON'T want to use front end HTML release.html code ANYMORE. Instead, I want to release directly by clicking. `my $id = param('release');` [download] This is the ERROR `sudo /usr/bin/amavisd-release 2 ERROR : Invalid id ''` [download] the above error does NOT show the ID. Hope to hear from you. Meanwhile I am also trying to resolve the issue.	[reply] [d/l] [select]
Re^9: INSERT file contents inside a table by poj (Abbot) on Jun 07, 2018 at 06:21 UTC
If you mean by clicking this link `<td><a href=/cgi-bin/release.pl>$id</a></td>` [download] then you need to add the id as parameter `<td><a href=/cgi-bin/release.pl?release=$id>$id</a></td>` [download] poj	[reply] [d/l] [select]
Re^10: INSERT file contents inside a table by theravadamonk (Scribe) on Jun 07, 2018 at 11:45 UTC
yeah, U r right.below code is OK. it's what I mean. But, I need YES and NO option after clicking for safety purpose. Anyway, It's my NEXT TASK. `<td><a href=/cgi-bin/release.pl?release=$id>$id</a></td>` [download] My IDs r in below formats spam-IUiA-_bUe0eN.gz badh-Xh-Vzy9BSsHN banned-8KuHlZuzBCaA virus-gUS5QeJ_ayqZ So, I had to changed the below code. It has UNDERSCORE as well `if ($id =~ /^spam-[a-zA-Z0-9-]+\.gz$/) {` [download] to `if ($id =~ /^spam-[a-zA-Z0-9-_]+\.gz$\|^badh-[a-zA-Z0-9-_]+\|^banned-[a- +zA-Z0-9-_]+\|^virus-[a-zA-Z0-9-_]+/) {` [download] also changed `my $cmd = "sudo /usr/bin/amavisd-release $id 2"; <code> to <code> my $cmd = "sudo /usr/bin/amavisd-release $id";` [download] Now, code WORKS well. Many thanks once again. UNLESS u helped me, I may NOT achive what I expect. hope to hear from you	[reply] [d/l] [select]
Re^11: INSERT file contents inside a table by poj (Abbot) on Jun 07, 2018 at 12:27 UTC
Re^12: INSERT file contents inside a table by theravadamonk (Scribe) on Jun 08, 2018 at 17:17 UTC