Re: exec command part 2?

$macad is the mac address they input before they go to the credit card processing site. if the credit card is approved then they get the serial number based on their mac address. if not it says not approved. - paul - "John W. Holmes" <holmes072000@charter.net> wrote in message news:004d01c30d43$336fa2f0$7c02a8c0@coconut... > > Well I finally got the code working: > > > > system("keygen $macad", $result); > > print "$result"; > > Where is $macad coming from? If it's possible that it's coming from the > user at all, make sure it's properly escaped so you're not allowing the > user to run any command they want on your server... The escape functions > are in the same chapter as the system()/exec() functions. > > ---John W. Holmes... > > PHP Architect - A monthly magazine for PHP Professionals. Get your copy > today. http://www.phparch.com/ > >