Re^10: hex code passed from command line is interpreted literally in substitution

I'm sorry, I retract that.

Would you agree then with AM, that it would be possible for eval to execute a system command if the appropriate code were typed in and used as one of the variables in the string below:


eval "s/$arg_1/$arg_2/";
[download]

Comment on Re^10: hex code passed from command line is interpreted literally in substitution Download Code

Replies are listed 'Best First'.
Re^11: hex code passed from command line is interpreted literally in substitution by ikegami (Patriarch) on Mar 10, 2011 at 23:35 UTC
Most definitely: `$arg1 = '//; system( ... ); #';` [download] Or without even breaking out of the s///: `$arg1 = '${ system( ... ) }';` [download]	[reply] [d/l] [select]
Re^12: hex code passed from command line is interpreted literally in substitution by Allasso (Monk) on Mar 10, 2011 at 23:45 UTC
ooooooh.... btw, what does the # do?	[reply]
Re^13: hex code passed from command line is interpreted literally in substitution by ikegami (Patriarch) on Mar 10, 2011 at 23:54 UTC
Say `$arg1 = '//; system( ... ); #'; $arg2 = '1234;` [download] then `eval "s/$arg_1/$arg_2/";` [download] becomes `eval 's///; system( ... ); #/1234/';` [download] The `#` causes the last bit to be a comment. Not necessary, apparently.	[reply] [d/l] [select]