From: Stanislaw Findeisen > Suppose you have a collection of books, and want to provide your users > with the ability to search the book title, author or content using > regular expressions. > > But you don't want to let them execute any code. > > How would you validate/compile/evaluate the user provided regex so as to > provide maximum flexibility and prevent code execution?
You want them to run an application without having to run an application? That doesn't make any sense. You have several options available to give your users access to a database. 1. Write a client application or applet they can copy or install on their workstation to access the database directly. 2. Write a simpler application or applet that accesses a non-DB server which in turn access the database. 3. Create a site on a web server they can access with a browser, which then accesses the database. There are any number of variations on these themes, but in each case, they have to run some application code somewhere in order to access the data. Bob McConnell -- To unsubscribe, e-mail: beginners-unsubscr...@perl.org For additional commands, e-mail: beginners-h...@perl.org http://learn.perl.org/
