Hi guys,

Is there an easy way to untaint arguments in a bourne shell script? I am
trying to prevent users from putting illegal characters such as backquotes
enclosed in apostrophes. For instance:

localhost$ script-name arg1 "arg2 `rm -rf /*`"

How do I simply extract arg2 without executing the illegal instructions? 

I know how to do this in Perl but not in Bourne shell script.

Thanks,
SH
-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to