Tom,
My data is coming from a trusted source (dumped from one of my databases).
Presumably even if someone put something evil like unlink.... into a field in 
my database, mysqldump will have escaped any apostophes etc, so I guess in this 
specific situation it should be safe.
Thanks for the warning though - definately a command to be very careful with.
Many thanks to Rob as well, the eval solution works nicely.
Cheers,
Paul


-----Original Message-----
From: [EMAIL PROTECTED] on behalf of Tom Phoenix
Sent: Fri 8/4/2006 4:51 PM
To: Rob Dixon
Cc: beginners@perl.org
Subject: Re: reg-ex match - reverse looking assertion?
 
On 8/4/06, Rob Dixon <[EMAIL PROTECTED]> wrote:

> The code below grabs the contents of the SQL string between (and
> including) the first '(' and the last ')'. It then calls eval() to process it

Please don't use the evil eval for this. You're using a flamethrower
to light candles. Slip the string 'unlink <*>' into the database, and
you'll be sad.

Cheers!

--Tom Phoenix
Stonehenge Perl Training

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>



Reply via email to