On Sat, May 3, 2008 at 4:42 PM, Jenda Krynicky <[EMAIL PROTECTED]> wrote:
snip
> > [stuff about how two arg open is more dangerous than three arg open
>  And that means you were lucky. If the $file contained something like
>  "|rm -rf /" or "rm -rf / |" ...
snip

Nah, you would be lucky if that were the case: / isn't a valid POSIX
filename character.  "| rm -rf ." or "rm -rf . |" on the other hand is
much more dangerous.  Not only is . a valid filename character, you
also tend to actually have permission to modify the current working
directory.

-- 
Chas. Owens
wonkden.net
The most important skill a programmer can have is the ability to read.

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/


Reply via email to