in reply to code problems

To run a system utility from perl, system, open, or exec. Use the LIST forms of argument to avoid shell interpolation.

There. I've given you enough rope to shoot yourself in the foot and blow your leg clean off. It is dangerous to give web users a form to run arbitrary commands on your server. Be very very careful, use Safe, and learn something about the evil tricks one can pull before exposing yourself.

After Compline,
Zaxo

Replies are listed 'Best First'.
Re: Re: code problems
by bory (Beadle) on Aug 29, 2003 at 12:25 UTC
    Thank you very much for the system sugestion, but now i have a problem: i put the command in this way and it doesn't print anything: system("rsh xxx.aaa.yyy. 'source.login; find -p AXY -D | sort -c | bugval -a %a a'")! If I write system("rsh aaa.xxx.yyy") It's ok, i can connect! But i want to print the data so i write the entire command but it's error! Thanks for helping me again!
      Hi! I found how to do this : my $results=qx(rsh xxx.aaa.yyy. 'source.login; find -p AXY -D | sort -c | bugval -a %a a') and then in the script I put print "$results"; after print "Content-type:txt/html\n\n" Thank you!!!