shell variable security
Jacques B.
jjrboucher at gmail.com
Wed Oct 3 16:46:28 UTC 2007
I guess this is easier than using a temp variable (I know, I'm using a
condition - but I had missed that part of your question on my first
posting).
if [ "$name" !> "${name%%+(;|:)*}"
then
echo "Invalid character!"
fi
In the meantime I echo Jonathan's question. I also tested this and
was unable to make the exploit work. It simply echoed what I typed,
semi-colon and all.
Jacques b.
More information about the users
mailing list