> Hi,
>
> I have tried:
>
> system("zip", "-r", "archive", "*");
>
> But this tells me that the file "*" cannot be found.
> I guess the shell thinks that I want to pass the quoted string "*" and not
> only the * character to match all files.
>
> I have succeeded with:
>
> system("zip -r \"archive\" *");
>
> But I have seen that it is recommended for security reasons to use
system()
> with multiple parameters...
>
This is done specifically for the reason you mention. Read the first
paragraph from the 'system' docs,
perldoc -f system
In the second form where you pass a single argument to 'system' the
shell metacharacter * is expanded to a list of files, in the first form
the metacharacter is not expanded. To simulate the metacharacter
expansion while in Perl you can use globbing to generate the list, then
pass that list as the last arg to system (careful of directories with
very large file lists).
perldoc -f glob
For more about globbing.
You may also want to read through
perldoc perlsec
Consider using a module from CPAN to do your zipping rather than
shelling out...
HTH,
http://danconia.org
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>
