in reply to Re: Re: Re: A rumination on finding secure scripts, versus rolling-your-own
in thread A rumination on finding secure scripts, versus rolling-your-own

It's a well-written article, but with one major flaw. It discusses the problems of passing unchecked user data to shell commands, but doesn't mention taint mode which is there to prevent you doing just that.

--
<http://www.dave.org.uk>

"Perl makes the fun jobs fun
and the boring jobs bearable" - me

  • Comment on Re: Re: Re: Re: A rumination on finding secure scripts, versus rolling-your-own