Re: Insecure, dependant and tainted:(

2001-08-04 Thread Mike Breeze
Secure, independent and untainted now - all thanks to me!:) The $site variable was actually passed in and I guess that could pose a security risk in that information passed in influences the directory structure. This is my first experience of Perl's security features - quite cool, as long as you

Re: Insecure, dependant and tainted:(

2001-08-04 Thread Me
Oops, my response ignores the specific line perl actually complained about. ;> One of the three variables used in the filename itself is tainted. I don't know which one because I don't know the rest of your code. Same rules as the ones I listed apply. > > if ( open( FD, "<$Globals::DATA/$si

Re: Insecure, dependant and tainted:(

2001-08-04 Thread Me
> Insecure, dependant and tainted:( Heh. Perl can be a bit brutal at times... > if ( open( FD, "<$Globals::DATA/$site/$Globals::REFTALLY" )) { >#**Error occurs here (on open)*** > if ( open( FD, ">$Globals::DATA/$site/$Gl

Insecure, dependant and tainted:(

2001-08-04 Thread Mike Breeze
Hi all, Can anyone see why the following code: # Name: updateReferrer # Usage: updateReferrer( $site, $referrer ); # Desc: Reads the referrer tally hash in from file, updates the count for # $referrer and then writes the hash back to file. # Return: n/a sub updateReferrer ($$) {