Re: [MACCAWS] Filenames and directory structure conventions

MJ Ray <[email protected]> Thu, 15 Aug 2002 13:03:16 GMT
Newsgroups gmane.comp.web.vkit
Message-ID <[email protected]>
Doug Winter <[email protected]> wrote:
> Putting metacharacters in filenames is asking for trouble from other
> systems that manipulate referenced documents.  [...]

Such systems are likely to be insecure and should be fixed, though.  I'm
forever fixing sloppy programming like failure to properly quote parameter
expansions in Bourne Shell scripts, so they die horribly if you give them
files with spaces in their names.  If you craft the file name correctly, you
can do evil things to them, possibly provoking unintended side-effects.  The
problem is the bad programming, not the specification of the file names. 
Fix the cause, rather than making workarounds.

I understand that the suggestions are just a "should", but when they start
to obstruct justifiable activities without good reason, they make me object.

-- 
MJR|  Apache is versatile, but you need to be careful when configuring
---'  it or it may shut down on you.  Always run "apachectl configtest"
      or equivalent over the httpd.conf before trying to load it in.
|-----[ Luminas internet applications http://www.luminas.co.uk/ ]-----|