Re: shell script cgi (summary?)

On Tue, 19 Nov 2002, Brian Fury wrote:

> On Mon, 18 Nov 2002, you wrote:

It shouldn't as long as you don't change the meaning of it.

> [root@localhost lib]# export LAME=""whoami""""

Yes that will work because the shell expands the `...` into "whoami". So that you have:
 [root@localhost lib]# 'whoami'
after expansion.

In the original example the expanded bit got stored in an variable so the after expansion the command would look like:  [root@localhost lib]# ua='whoami'
.
So no futher execution (notes I used ' to show that the shell expands things only once).

> In case you didn't realise - it'z the ` and ` characters around the whole

Yes the idea behin `` is that it gets executed and replaced by the output of it. If this output will get executed depends if you are useing the output as command (your example) or not (the original example).

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Bye Andre' Received on Wed Nov 20 03:18:06 2002