http://qs321.pair.com?node_id=159288


in reply to Re: file download security
in thread file download security

Isn't the fact that we have:

open(FILE "$filename")

another big one? (I'm getting back into Perl after a year of two of Java)

open(FILE "<$filename")

is a good idea to ensure that even if the user is able to access files that they shouldn't using this script, at least they can't replace foo.txt with my_evil_virus.txt.

HTH