Re: Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
In message <40504.1382576...@server1.tristatelogic.com>, I wrote: >>> Well, I added to the script some rudimentary filtering/validation of >>> the input strings in question also. >> >>you need more than rudimentary filtering. make sure the from field is >>one string, no newlines or anything but

Re: Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
In message <5268663c.4040...@stemsystems.com>, Uri Guttman wrote: >i think a blank line with . will end input to smtp servers. try that too >in the line after the from field. DING DING DING!!! Give that man a cupie doll, because he's the winner of today's perplexing puzzle test! In short, ye

Re: Please throw some light on $? variable

2013-10-23 Thread Shaji Kalidasan
Dear Jim, Thanks for your pointers. It is greatly appreciated.   Sincerely, Shaji --- Your talent is God's gift to you. What you do with it is your gift back to God. ---

Re: Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
In message <20131023193228.38cf83e2@sage>, you wrote: >On Wed, 23 Oct 2013 16:12:12 -0700 >"Ronald F. Guilmette" wrote: > >> I believe that you may be on to something here, but it is more than >> just Postfix seeing a \n\n and believeing that it had encountered the >> end of the headers. It is

Re: Help needed with here documents (security?)

2013-10-23 Thread Uri Guttman
On 10/23/2013 07:12 PM, Ronald F. Guilmette wrote: In message <52684f18.2000...@stemsystems.com>, you wrote: I _do_ know more than a little about mail servers, and while you are basically correct, i.e. that Postfix would certainly view anything past the first \n\n encountered as being *messag

Re: Help needed with here documents (security?)

2013-10-23 Thread Dr.Ruud
On 2013-10-24 01:12, Ronald F. Guilmette wrote: In message <52684f18.2000...@stemsystems.com>, you wrote: On 10/23/2013 06:18 PM, Ronald F. Guilmette wrote: ... print SM < From: "$sender_name" <$sender_addr> Subject: Your message to Tristatelogic.Com X-Server-Protocol: $server_protocol X-Http

Re: Help needed with here documents (security?)

2013-10-23 Thread Shawn H Corey
On Wed, 23 Oct 2013 16:12:12 -0700 "Ronald F. Guilmette" wrote: > I believe that you may be on to something here, but it is more than > just Postfix seeing a \n\n and believeing that it had encountered the > end of the headers. It is possible that something in the input > stream I gave it signal

Re: Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
In message <52684f18.2000...@stemsystems.com>, you wrote: >On 10/23/2013 06:18 PM, Ronald F. Guilmette wrote: > >> ... >> print SM <> To: "Tristatelogic.Com Administrator" >> From: "$sender_name" <$sender_addr> >> Subject: Your message to Tristatelogic.Com >> X-Server-Protocol: $server_protocol

Re: Help needed with here documents (security?)

2013-10-23 Thread Uri Guttman
On 10/23/2013 06:18 PM, Ronald F. Guilmette wrote: ... print SM < From: "$sender_name" <$sender_addr> Subject: Your message to Tristatelogic.Com X-Server-Protocol: $server_protocol X-Http-User-Agent: $http_user_agent X-Http-Referer: $http_referer X-Remote-Addr: $remote_addr X-Remote-Host: $remot

Re: Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
In message <39517.1382566...@server1.tristatelogic.com>, I wrote: >About a day ago, some schmuck set about to try, hard, to exploit the >personally written Perl code I have in place and that processes the >input for the contact form on my web site... I neglected to mention that this was obviousl

Help needed with here documents (security?)

2013-10-23 Thread Ronald F. Guilmette
I'm not actually/formally a Perl "beginner", but this problem is making me feel like one. About a day ago, some schmuck set about to try, hard, to exploit the personally written Perl code I have in place and that processes the input for the contact form on my web site (www.tristatelogic.com). Fo

Re: Please throw some light on $? variable

2013-10-23 Thread Jim Gibson
On Oct 23, 2013, at 12:56 AM, Shaji Kalidasan wrote: > Dear Perlers > > Please throw some light on the $? variable > > I am trying to figure out how the internal structure (format) of $? variable. > Please throw some light on this topic. The content of $? is explained in the perlvar document.

Please throw some light on $? variable

2013-10-23 Thread Shaji Kalidasan
Dear Perlers Please throw some light on the $? variable I am trying to figure out how the internal structure (format) of $? variable. Please throw some light on this topic. Any help is highly appreciated. [code] system('cat file1.txt'); if($?) {#A Non zero exit code means failure if($? == -1)