Can System() of Perl be bypassed?

From: Sandeep Giri <sandeepgiri(at)indiatimes.com>
Date: Wed Jan 22 2003 - 02:03:27 EST

('binary' encoding is not supported, stored as-is)

Hi All,
In my PERL code,I am using user's input as command line argument for the program being executed by System().
Can user run command of his choice by giving malicious input? Is PERL's -T (Taint mode) the solution for this?

Thanks.

Sandeep Giri Received on Wed Jan 22 16:26:40 2003