>>>>> "Timothy" == Timothy Johnson <[EMAIL PROTECTED]> writes:

Timothy> If you don't mind having underscores in your text, you could also do this:

Timothy> if($string !~ /^\w+$/){  #If the string does not have only letters, digits,
Timothy> and underscores from start to finish (\w)

Nope, that also permits "fred\n".  Remember that $ is the same as /\n?\z/.
You want \z instead.

Very common mistake, and could have drastic effects on security.
Bad.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to