This is all true but not what he is asking.
I know of one way, you can call a CGI script with the parameters that you
would normally feed into a form in the URL.
eg: http://test.com/test.pl?stuff="bla"&numbers=23
Bjorn Nilsen
Manux Solutions Ltd
> -----Original Message-----
> From: Brett W. McCoy [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 18 July 2001 7:37 a.m.
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: passing form values to another Perl script
>
>
> On Tue, 17 Jul 2001 [EMAIL PROTECTED] wrote:
>
> > Has anyone out there created a form using the CGI.pm
> module then taken
> > the values submitted by the form and then used those values
> as command line
> > arguments to run another script?
>
> Before you do anything with those form values, make sure they
> are correct.
> And then make sure again.
>
> The first rule of form validation is 'Do not trust the data from the
> user'.
>
> The second rule of form validation is 'Do not trust the data from the
> user'.
>
> Unless you absolutely have to, running command-line scripts from a CGI
> script with data retrieved from a form should not be done.
> If you do need
> to do it, make darn sure the data is correct, because if you
> are expecting
> a command-line argument of 'x', someone can easily have 'x;
> rm -fr *' in
> that form variable, and if that is passed to system, you've
> got trouble.
>
> -- Brett
> http://www.chapelperilous.net/btfwk/
> --------------------------------------------------------------
> ----------
> Patience is a minor form of despair, disguised as virtue.
> -- Ambrose Bierce, on qualifiers
>
>
> --
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
