If you had a program such as example below

ED BP TEST.BREAK
3 lines long.

----: P
0001: PRINT "ENTER NAME ":
0002: INPUT NAME
0003: EXECUTE "LIST VOC ":NAME
Bottom at line 3.


>RUN BP TEST.BREAK
ENTER NAME ?~DOS /c DIR

It will list the VOC then execute the DOS command DIR.   In Unix the SH
shell command would probably do the same.

There are security measures that can be taken to mitigate this.  Using the
voc security routine, Cleaning control characters out of inputted data.

Regards


David Jordan

Managing Consultant
-------
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to