note 2594 deleted from Program Execution functions by jmoore
| From: | jmoore@php.net | Date: | Fri, 18 Aug 2000 23:22:29 +0000 |
| Subject: | note 2594 deleted from Program Execution functions by jmoore | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-2556@lists.php.net to get a copy of this message | ||
If you are using user inputted variables within your script be sure to exclude "dangerous"
characters like:
; could start entering another command
| could open a pipe (eg to mail)
` could execute a command
>!-- could execute SSIs
I'm sure that there are others.