[EMAIL PROTECTED]
> Pipes and ampersands are worse. And one can imagine worse things...
>
> Don't do this:
>
> > /tmp/"xxx; rm -rf /"
>
> Then use any script that uses this idiom:
>
> for f
> do
> eval echo $f
> done
>
> Not everyone is careful to use "$f" throughout the scripts they write.
then it's a bug in the script!
Apart from your example above, even simple things like:
if [ $f = 'y' ]
will bomb out if $f is blank.
Dave.
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
