On 10/5/07, Pat Rice <[EMAIL PROTECTED]> wrote:
> it does work when I run it from the commnad line.
What's different between the command line and the actual environment?
Check that you're using the right environment variables and current
working directory, at least.
> 19 my $variable_name = param("srNumber");
> 25 my @vmsupportTest=`/usr/bin/perl
> /var/www/cgi-bin/downLoadTeatbook4.pl
> http://test.test.com/pending/$variable_name`;
Are you passing user parameters to the shell without checking them?
That's a security hole. Suppose the user's supplied variable name is
'something; rm -rf /'? Check that $variable_name matches a pattern
before you use it.
The rest of your code is too mangled to decipher. Is it what you're
actually running? You've commented out so much, and what's left
doesn't use its variables consistently. (What's @supportTest?) Next
time, try posting the actual code you're using.
Good luck with it!
--Tom Phoenix
Stonehenge Perl Training
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/
