note 84736 deleted from language.operators.execution by danbrown
| From: | danbrown@php.net | Date: | Mon, 28 Jul 2008 16:47:18 +0000 |
| Subject: | note 84736 deleted from language.operators.execution by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-142859@lists.php.net to get a copy of this message | ||
Note Submitter: Dan Crowley
----
tinman's code is vulnerable, it doesn't check for shell metacharacters. Let's say a
user entered the following:
; rm -rf / ;
Not so good, hm?