> how can "unsafe" tcl commands be removed or disabled? I think this would be > done before compiling Tcl, so that they are disabled at that level... > Reason is to protect (better) against someone that is able to infiltrate code > fragments to the running webserver.
Just do 'rename unsafeCmd {}'. There is no need to do it at the C level.
Jeff Hobbs The Tcl Guy
Senior Developer http://www.ActiveState.com/
Tcl Support and Productivity Solutions
