Re: [MACCAWS] Filenames and directory structure conventions
MJ Ray <[email protected]> Thu, 15 Aug 2002 13:03:16 GMT
| Newsgroups | gmane.comp.web.vkit |
|---|---|
| Message-ID | <[email protected]> |
Doug Winter <[email protected]> wrote: > Putting metacharacters in filenames is asking for trouble from other > systems that manipulate referenced documents. [...] Such systems are likely to be insecure and should be fixed, though. I'm forever fixing sloppy programming like failure to properly quote parameter expansions in Bourne Shell scripts, so they die horribly if you give them files with spaces in their names. If you craft the file name correctly, you can do evil things to them, possibly provoking unintended side-effects. The problem is the bad programming, not the specification of the file names. Fix the cause, rather than making workarounds. I understand that the suggestions are just a "should", but when they start to obstruct justifiable activities without good reason, they make me object. -- MJR| Apache is versatile, but you need to be careful when configuring ---' it or it may shut down on you. Always run "apachectl configtest" or equivalent over the httpd.conf before trying to load it in. |-----[ Luminas internet applications http://www.luminas.co.uk/ ]-----|