From: "Chas. Owens" <[EMAIL PROTECTED]>
> On Sat, May 3, 2008 at 4:42 PM, Jenda Krynicky <[EMAIL PROTECTED]> wrote:
> snip
> > > [stuff about how two arg open is more dangerous than three arg open
> >  And that means you were lucky. If the $file contained something like
> >  "|rm -rf /" or "rm -rf / |" ...
> snip
> 
> Nah, you would be lucky if that were the case: / isn't a valid POSIX
> filename character.

Why do you think it matters? And | is a valid POSIX filename 
character?

>  "| rm -rf ." or "rm -rf . |" on the other hand is
> much more dangerous.  Not only is . a valid filename character, you
> also tend to actually have permission to modify the current working
> directory.

You are right about the last issue though.

Jenda
===== [EMAIL PROTECTED] === http://Jenda.Krynicky.cz =====
When it comes to wine, women and song, wizards are allowed 
to get drunk and croon as much as they like.
        -- Terry Pratchett in Sourcery


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
http://learn.perl.org/


Reply via email to