Re: [tlug] Security question with grep/egrep

[Brett Robson <b-robson@example.com>]

On Mon, 22 Mar 2004 13:18:04 +1100 (EST)
Jim Breen <Jim.Breen@example.com> wrote:


> I have a huge collection of Japanese/English sentence pairs, which I
> have linked to my dictionary server. One option I am playing with is
> to allow users to do greppy searches on English or Japanese strings.
> >From a form the user would enter a string, then the CGI program would
> do a system() call of:
> 
>         egrep -i "<data from the form>" examples_file | <display processing>


OS stuff in cgi is a nightmare, I'd prefer to use Perl's built in stuff
do to that. If you aren't programming in Perl perhaps a Perl wrapper
would be best.

The most obvious thing of course is to make sure the web server's
privileges  are restricted.


Brett

ps it's bloody cold in Tokyo.



-- 
Brett Robson 
Systems Administrator
GOL 
http://www.gol.com
Phone: 03-3239-6856    International: +81-3-3239-6856