Correct Way to read POST data

2005-08-09 Thread Shawn Devlin
Hello, I need to read the, for lack of a better term, raw post data sent to a CGI script. I have the following code: use CGI; my $Cgi = CGI->new(); my $PostData = $Cgi->query_string; Is this the correct/best way? The reason I ask is that, for one user calling my script, the $PostData con

RE: Insecure setuid?

2005-08-09 Thread Tantalo, Christopher G
Ok, the date issue I can solve using the built in date functionality. The second issue, I am trying to see if the data is untainted by using my $err_file = $ENV{"SLS_LOG_PATH"} . "/drivererror" . $rt_id .. ".err"; if ($err_file =~ /^([EMAIL PROTECTED])$/) { $err_fi

Re: Insecure setuid?

2005-08-09 Thread Wiggins d'Anconia
Tantalo, Christopher G wrote: > Can anyone shed some light on what this error means? > Insecure $ENV{PATH} while running setuid at > /var/appl/sls/bin/driver.pl line 1104. > Line 1104 is > print `date`; > You shouldn't shell out to date anyways, especially in the above manner with n

Insecure setuid?

2005-08-09 Thread Tantalo, Christopher G
Can anyone shed some light on what this error means? Insecure $ENV{PATH} while running setuid at /var/appl/sls/bin/driver.pl line 1104. Line 1104 is print `date`; If I comment this out, then the following error message appears: Insecure dependency in open while running set