Re: Taint mode CGI problem

2011-11-11 Thread Peter Scott
On Fri, 11 Nov 2011 19:08:18 -0300, Tessio Fechine wrote: > #!/usr/bin/perl -T -w > > use strict; > use CGI; > > $ENV{PATH} = '/var/www/cgi-bin/'; > my $exec = 'search.pl'; > > > my $c = CGI->new(); > print $c->header(), $c->start_html(-title => "It's alive!\n"), "\n"; > > my $search = $c->par

Taint mode CGI problem

2011-11-11 Thread Tessio Fechine
Hello, I have this CGI script: ---//--- #!/usr/bin/perl -T -w use strict; use CGI; $ENV{PATH} = '/var/www/cgi-bin/'; my $exec = 'search.pl'; my $c = CGI->new(); print $c->header(), $c->start_html(-title => "It's alive!\n"), "\n"; my $search = $c->param('search') || 'nobody'; !system $exec, "(