Re: shell script cgi

I'm convinced there is no way in this particular statement, given that the var is in quotes.

All you're doing after all is echoing it, which only does one level of interpretation, which in this case is removing the quuotes.

Of course, some values may be more dangerous for statements further on in the code.

e.g.
HTTP_USER_AGENT='`cat /etc/passwd`'

Matt Received on Sat Nov 16 20:12:40 2002