RE: Perl code security (CGI related)
jnf <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
hrm, clever- ive never thought of that- and im sure it would come out
'cleaner' than adding a null byte.
j
- --
It is only the great men who are truly obscene. If they had not dared to
be obscene, they could never have dared to be great.
-- Havelock Ellis
On Mon, 5 Apr 2004, Michael Silk wrote:
> Yes, My example was only to exec shell command, not specific
> for the code posted ... you'd probably be better off inputting
> something like:
> --------------------
> $default = " someCommonPm.pm;\nsystem(\"ls\");\n#";
> --------------------
>
> to just comment out the remaing chars ...
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (OpenBSD)
iD8DBQFAckx3sKAeTAhLiCERAutOAKCB6zyGbhQtHm37PDnNFvghe3WxqgCdEAgu
vMPI5kQHCP0/Q9KWr0sL+EA=
=clgH
-----END PGP SIGNATURE-----