Re: untaining data

2001-06-22 Thread Curtis Poe
--- Timothy Kimball <[EMAIL PROTECTED]> wrote: > Curtis Poe wrote: > : my ( $data ) = ( $dirty_data =~ /^([-@w.:+, ]+)$/ ); > : > : Note that a character class does not respect metacharacters like a normal regex. >You don't > need > : to escape most characters. > > You still need the backslash

Re: untaining data

2001-06-22 Thread Timothy Kimball
Curtis Poe wrote: : How do you know if the untainting succeeded? Since you are assinging back to the :same variable : (unless you have an else that you didn't show us). I like to assign to a 'dirty' :variable and : then untaint to a clean one. This is a lot safer. If a maintenance programme

Re: untaining data

2001-06-22 Thread Curtis Poe
--- Alen Sarkinovic <[EMAIL PROTECTED]> wrote: > I'm using this format for untaining data : > > if ($data =~ /^([-\@\w.]+)$/) { > $data = $1; > > but , I would like to alow char : + ,and ,char : space , to be entered into the >$data > What code will do

Re: untaining data

2001-06-22 Thread Timothy Kimball
Alen Sarkinovic wrote: : I'm using this format for untaining data : : : if ($data =~ /^([-\@\w.]+)$/) { : $data = $1; : : but , I would like to alow char : + ,and ,char : space , to be entered into the :$data : What code will do that? Just add + and \s to the list (you don'

untaining data

2001-06-22 Thread Alen Sarkinovic
I'm using this format for untaining data : if ($data =~ /^([-\@\w.]+)$/) { $data = $1; but , I would like to alow char : + ,and ,char : space , to be entered into the $data What code will do that? Thanks