in reply to Re^3: File::Find considered hard?
in thread File::Find considered hard?

Well, I was actually making a *shudder* joke. No, something as simple as injecting /etc/shadow into someone's list of files is not exactly tantamount to a root vulnerability. (But you should fear if someone injects etcshadow into your code.)

However, depending on what you were planning to do with that list of files, it might have been a Bad Thing to have /etc/shaddow injected into it... particularly if this script were being run as root.

In case you haven't noticed... using find with -print (which is the defualt command for find) is one of my pet-peeves.

Use -print0 or -exec.

Use -print0 or -exec!

Use -print0 or -exec!!!

example code: 

my @files;
{
  local $/="\0";
  chomp (@files = `find . -print0`);
}

[download]

How hard was that? Now you have shut me down. You are l33t, and I am suX0rz. 

------------
:Wq
Not an editor command: Wq

[download]

Replies are listed 'Best First'.
OT: Re: Re: Re^3: File::Find considered hard?
by Happy-the-monk (Canon) on Mar 15, 2004 at 13:08 UTC

    (But you should fear if someone injects etcshadow into your code.)

    You talk about not getting your jokes. But anyway, why is that?

    Sören

[reply]

In Section Meditations