Re: perl-cgi hole in UltimateBB by Infopop Corp.

[Bill <mckinnon@ISIS2000.COM>]

"Sergei A. Golubchik" wrote:
>
> The fix is obvious. But the rule of the thumb is "do not use magic perl 
>open".
> At least in cgi scripts. If you want to open regular file, sysopen does
> the trick as well.

   Isn't open(FH, "< $variable") sufficient to stop any embedded |'s, etc
from doing anything harmful, as well?

- Bill