----- Original Message ----- From: "adam morley" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 26, 2002 7:30 PM Subject: Re: tmda-pending read from stdin?
> On Mon, Aug 26, 2002 at 05:18:28PM -0500, Tim Legant wrote: > > adam morley <[EMAIL PROTECTED]> writes: > > > > > Is there any way to pipe a message name/number to tmda-pending to > > > get it to release? > > > > Is piping necessary? How about this? > > > > $ tmda-pending -br 1012182077.5803.msg > > > > In other words, pass the message's filename on the command line. This > > is taken from the example you get when you type tmda-pending --help. > > That's what I normally do, but I'm doing this with perl, and when I run perl from a website/email gateway, I only use pipes, as I've heard those are secure, whereas putting something from a piece of user data into a shell is a ``bad thing'' so to speak. But I'm not an expert on this, so I wouldn't mind a few opinions. I am matching for specifically a line containing a tmda message id ([0-9] a bunch of times, a dot, 0-9 a couple times, ., msg) > Adam, The reason that you don't want to put stuff on the command line is so that a "bad guy" can't just 'ps -ef' to get your passwords. There is no quality information to be gleaned from the release of a pending message. I would say that you were safe to proceed with the command line option. -- kevin zollinger [EMAIL PROTECTED] _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
