Vulnerability Development mailing list archives

Re: shell script cgi


From: Rajko Zschiegner <rajko () ricki-z com>
Date: Fri, 15 Nov 2002 00:03:12 +0100

Hi,

may be this line solves your problem:

ua=`echo \`$HTTP_USER_AGENT\` | sed "s#\;##g"`

Regards,

Rajko Zschiegner


c jones wrote:

Hi,

I have found the line below in an sh cgi program, and
believe I can pass a command to the shell but can't
seem to get it to work right. No matter what I try as
the HTTP_USER_AGENT it interprets it as a string in
the echo command & I can't get it to break it into a
new command. Nothing is done to HTTP_USER_AGENT before
this line...it's just reading it directly from the
environment.

Any help you may have is very much appreciated.

Thanks

ua=`echo "$HTTP_USER_AGENT" | sed "s#\;##g"`




__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - Let the expert host your site
http://webhosting.yahoo.com




Current thread: