in reply to Run arbitrary UNIX commands on webserver without telnet

Far too much overkill. If you can upload that script, you can upload this:
#!/bin/sh echo content-type: text/plain echo ... put ... your ... command ... here
No point in even using an input form (or Perl!) for this. How silly. How insecure. How overkill.

-- Randal L. Schwartz, Perl hacker

Replies are listed 'Best First'.
(OT) - overkill Re: Re: Run arbitrary UNIX commands on webserver without telnet
by osfameron (Hermit) on Oct 31, 2001 at 02:25 UTC

    >Far too much overkill

    I love this idea! And I want tips from more experienced monks on how to decide exactly how much overkill I need to put in my CGI scripts ;->

    Cheerio!
    Osfameron
Re(2): Run arbitrary UNIX commands on webserver without telnet
by dmmiller2k (Chaplain) on Oct 31, 2001 at 02:10 UTC

    You're right, of course...

    Funny, this script started out as a hard-coded script that I would clone for each new command. See this node, for a prettied up version.

    It was only after the bright idea of posting it occurred to me that I even thought of adding the form. I suppose the idea just got away from me. Thanks for bringing it down to earth.

    dmm