Re: Form parameter as filename?

2002-01-07 Thread Rob Cottingham
Thanks for the suggestion, Fliptop. Someone finally pointed out my problem: data tainting was on, and I had to untaint the data before Perl would let me use it in something as exposed as a filename. Whew!! Cheers, --rob -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-

Form parameter as filename?

2002-01-07 Thread Rob Cottingham
Hi, all -- I'm trying to use a parameter passed from a CGI form as the basis of a filename: my $file_location = "/home2/samuel-c/HTML/alex/urltest/"; my $filename=param('category'); my $fileid=$file_location.'urls_'.$filename; open(ULL, ">>$fileid") || die "Can't open the URL file