Re: Safety of linking to a text file

in reply to Safety of linking to a text file

A text file is no different than a .jpg for this purpose. If a .jpg is safe, so would a text file.

Two tips:

Make sure the user can't specify an arbitrary file name to view (by using either a relative or absolute path). If you redirect to the text file rather than printing it out in the CGI, ignore this because the web server handles checking paths and permissions.
Make the file readonly (chmod 0444 filename.txt) to be safe.

Comment on Re: Safety of linking to a text file Download Code

Replies are listed 'Best First'.
Re^2: Safety of linking to a text file by MonkPaul (Friar) on Aug 17, 2005 at 18:47 UTC
Cheers my good man. In the way you said things, i should be ok with this as it stands. I think modding the file though would be a good idea after i have created it, though the user may use it as input later on in the same program, which may be a problem when im trying to write new data in. Hmmmmmmm...... some thinking required. cheers, MonkPaul	[reply]

In Section Seekers of Perl Wisdom