I didn't say it was impossible. I didn't say it was hard. I was just giving a warning. And apparently it was warranted, since your code suffers from the very bug I mentioned. It will fail when the file name contains a double-quote.
If you get data from untrusted sources, don't you have to be just as careful invoking that data as a command directly as you do invoking it indirectly via a command shell?
You have one less thing to protect yourself against. By using system PRORAM, LIST, you don't have to worry about special characters.
In reply to Re^5: Asynchronous Program Spawning
by ikegami
in thread Asynchronous Program Spawning
by awohld
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |