Re: Gzipped output
| From: | Per Jessen | Date: | Mon, 11 Feb 2008 18:48:05 +0000 |
| Subject: | Re: Gzipped output | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269116@lists.php.net to get a copy of this message | ||
Eric Butera wrote:
>> Why is it a security concern to execute another bit of code?
>> I really fail to see any security concern in doing e.g.
>>
>> exec('gzip -c /tmp/myinputfile')
>>
>
> In the real world would that be your exact usage? Would the file to
> be compressed be a variable by chance?
I think in the context of this thread, the file to be compressed would
likely be a temporary file with a generated temporary name, so yes, the
filename would be held in a variable.
/Per Jessen, Zürich