Pawe? Grzesik:
> I think I can do the same in Ruby using IO.popen like:
>   IO.popen(["/usr/sbin/sendmail", "-G", "-i", my_str], "w") do |pipe|
> as I see in this case I don't even need to use my_str with \" \".
> But I'm still confused about -f option in, and characters "--"
> between ${sender} and ${recipient}.
> Why is that?


popen(["/usr/sbin/sendmail", "-G", "-i", "-f", sender, "--", my_str, "w")

The -- is needed to close a different security hole.

If you don't know about these bugs that go back to 1996 and earlier,
then please don't write code that handles network data.


Reply via email to