ok, thanks for the clarification, that makes sense.

I changed the message on my script to alert the user that they will need to
download the script locally then run it.


"Wc -Sx- Jones" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> PerlScript was designed sort of as a SSI language -- with all those
> types of problems.
>
> Anyone that allows anyone else to execute code from the Web Server on
> the client is a violation of trust on the part of the Web Server.  Can
> you erase someone's harddrive with JavaScript or VBScript?  No, but you
> *could* if people allowed you to run PerlScript.
>
> Clients cannot be trusted and, these days, neither can Web Server code.
>
> Think of PerlScript the same way as you would PHP - can you run PHP
> from the Server onto the client?  Nope.
>
>
> Nothing personal, it is just the way things are supposed to work.
>
> HTH/Sx
>
> http://InSecurity.org/
> _Sx____________________
>   ('>    iudicium ferat
>   //\   Have Computer -
>   v_/_    Will Hack...
>
>                \|/ ____ \|/
>                "@'/ .. \`@"
>                /_| \__/ |_\
>                   \__U_/
>



-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to