Re^2: Security issue and solution for terminal command accessed by public user

Replies are listed 'Best First'.
Re^3: Security issue and solution for terminal command accessed by public user by ww (Archbishop) on Jul 06, 2012 at 18:21 UTC
AnonyMonk suggested avoiding the shell for numerous very good reasons -- some of which would likely be those I would cite: if you use the shell and the external program, you've increased complexity; likely have opened some exploitable security gaps, and added overhead for your server. Unless you think the variety of conversions done by the external program outweigh all of those, heed AM's advice. And, in any case, be aware you're reinventing the wheel! Is there some really valid reason to create and invent/install your own wheels, gears, and interfaces when a simple search -- for "unit conversions" or even "conversions" will turn up many existing (and mostly, free) services? And, please, read the instructions around the text-entry box. Use <p>...</p> around paragraphs; <c>...</c> around code and data. <pre> tags make your nodes hard to read or bork the rendering for some Monks.	[reply]
Re^4: Security issue and solution for terminal command accessed by public user by keenlearner (Acolyte) on Jul 07, 2012 at 05:24 UTC
Hi Thanks for your warning about the security issue. Yeah, I am aware that there are a lot of conversion program out there already. But my reason being that this web application is going to be multi-purpose and multi-function for daily life task. So by adding this to the web application is just for being more complete. Just like there are many candy stores available, among them definitely they do sell the same candy, but people will prefer to go to other candy store in the future if they find your candy store is not complete enough. Okay, I have just started to use the p tag, just that would require more effort than pre tag. Like in replying this I need to put 4 pairs of p tag, while require only 1 pair of pre tag. But the text become hard to read for pre tag hehe :) Sorry for being lazy. But my intention is just to be more efficient.	[reply]
Re^5: Security issue and solution for terminal command accessed by public user by AnomalousMonk (Archbishop) on Jul 07, 2012 at 20:53 UTC
Okay, I have just started to use the p tag... Okay. Now, since you posted as a registered user, maybe you could go back and edit the offending reply Re^2: Security issue and solution for terminal command accessed by public user (and maybe even the OP Security issue and solution for terminal command accessed by public user) to get rid of the `<pre>` tags. But my intention is just to be more efficient. But, in my experience, posts that extend `way off the right side of my browser window are not very efficient in getting me (or, I suspect, many other monks) to read them and possibly to generate a helpful reply.	[reply] [d/l]
Re^3: Security issue and solution for terminal command accessed by public user by Anonymous Monk on Jul 06, 2012 at 18:49 UTC
http://perl.plover.com/units	[reply]
Re^3: Security issue and solution for terminal command accessed by public user by Anonymous Monk on Jul 06, 2012 at 18:50 UTC
or is there a tutorial for this ? Can you find a tutorial for this?	[reply]
Re^4: Security issue and solution for terminal command accessed by public user by keenlearner (Acolyte) on Jul 07, 2012 at 05:10 UTC
Of course I had Google beforehand. But no good tutorial regarding the security issue and the solution so far.	[reply]
Re^5: Security issue and solution for terminal command accessed by public user by Anonymous Monk on Jul 07, 2012 at 06:51 UTC
Of course I had Google beforehand. But no good tutorial regarding the security issue and the solution so far. But did you check Tutorials? Tutorials: Web Programming: CGI Programming: Security in CGI Programming and Ovid's CGI Course Lesson 3 A brief overview of CGI and Web security	[reply]