And an easy way to block that is to remove write access to the dictionary. Iirc, you can't compile an EVAL if you can't compile an i-type. I believe that was done for security reasons, but it may simply be that the easy way to code it was to write a temporary item to the dictionary. Either way, if you can't write to the dictionary, you shouldn't be able to do an EVAL.
Cheers, Wol -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hona, David S Sent: 29 October 2007 07:34 To: u2-users@listserver.u2ug.org Subject: RE: [U2] Stringing commands together on the command line. Possible? Yes, I wondered the same thing... EVAL is designed to "emulate" an I-type dictionary item. Hence, will only execute any command that you can successfully compile within an I-type. So it wouldn't allow what you have in your example. You'd need a subroutine that could execute via EVAL to invoke a TCL or OS command indirectly. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross Ferris Sent: Monday, October 29, 2007 6:13 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] Stringing commands together on the command line. Possible? Don't have access to UV at present, but wonder if the following INPUT would do the "trick" > ' AND WITH EVAL "EXECUTE 'CLEAR.FILE CLIENT'" = ' Ross Ferris Stamina Software Visage > Better by Design! ------- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ ------- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
