-T was made for people who make those mistakes.
Of course, with badly written programs you want to conceal everything, or as least as much as possible. You might even want to change some texts and some layout so people can't look up the source in Matt's archive.
Or, untainting:$file = $q->param('file'); die "horribly" if $file !~ /^[a-z]+\z/; open FILE, $file;
$file = $q->param('file'); ($file) = $file =~ /^([a-z]+)\z/; open FILE, $file;
U28geW91IGNhbiBhbGwgcm90MTMgY
W5kIHBhY2soKS4gQnV0IGRvIHlvdS
ByZWNvZ25pc2UgQmFzZTY0IHdoZW4
geW91IHNlZSBpdD8gIC0tIEp1ZXJk
In reply to Re: Re: Does fatalsToBrowser give too much information to a cracker?
by Juerd
in thread Does fatalsToBrowser give too much information to a cracker?
by rinceWind
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |