"John Fouhy" <[EMAIL PROTECTED]> wrote

 s = "[2.5,2.8]"  # your string from the file

 e = "tuple(" + e + ")"

This should of course be

 e = "tuple(" + s + ")"

If I, as an evildoer, can control e, it seems that I could set it to:

   ,), __import__('os').system('rm -rf /'

Assuming you now mean s rather than e...
That wouldn't work since tuple() would fail on that expression.

HTH,

Alan G

_______________________________________________
Tutor maillist  -  [email protected]
http://mail.python.org/mailman/listinfo/tutor

Reply via email to