On Sat, May 3, 2008 at 5:57 PM, Jenda Krynicky <[EMAIL PROTECTED]> wrote:
> From: "Chas. Owens" <[EMAIL PROTECTED]>
>
> > On Sat, May 3, 2008 at 4:42 PM, Jenda Krynicky <[EMAIL PROTECTED]> wrote:
>  > snip
>  > > > [stuff about how two arg open is more dangerous than three arg open
>  > >  And that means you were lucky. If the $file contained something like
>  > >  "|rm -rf /" or "rm -rf / |" ...
>  > snip
>  >
>  > Nah, you would be lucky if that were the case: / isn't a valid POSIX
>  > filename character.
>
>  Why do you think it matters? And | is a valid POSIX filename
snip

Hmm, you are right.  I was an idiot there.  I was assuming the file
was coming off disk (but named in a way to cause problems for the
processing program), but $file could come from anywhere.

-- 
Chas. Owens
wonkden.net
The most important skill a programmer can have is the ability to read.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/


Reply via email to