system & shell metacharacters

Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:

All,

I have a script foo.pl that reads a tiny XML file into a variable. foo.pl then calls another Perl program bar.pl via system and attempts to give the XML to bar.pl with a command line switch -d:

#!/usr/bin/perl -w

open (XML, $somefile) || die "Could not open $somefile - $!";
my $xmldata;
while (<XML>) {
   $xmldata .= $_;
}
close (XML);
system("bar.pl -p 1234 -d $xmldata");
[download]

bar.pl just has the following:

#!/usr/bin/perl -w

use Getopt::Std;

getopts('d:p:');
our $opt_d;
our $opt_p;
print $opt_p, "\n";
print $opt_d, "\n";
[download]

Unfortunately, the XML file (that foo.pl reads) contains all kinds of yucky shell metacharacters such as quotes, newlines etc:

<?xml version="1.0"?>
<data config="dev">
   <SomeTag>data</SomeTag>
   <AnotherTag>data</AnotherTag>
   <SQL>select foo from bar where baz = 'something'</SQL>
</data>
[download]

Only a portion of the xml data is actually making it into $opt_d in bar.pl. Do I have to escape every metacharacter in $xmldata prior to calling bar.pl?

Comment on system & shell metacharacters Select or Download Code

Replies are listed 'Best First'.
Re: system & shell metacharacters by Thelonius (Priest) on Jul 23, 2003 at 00:24 UTC
Are you sure you want to pass XML data on the command line? Why not have bar.pl read the XML data from stdin? Or, for that matter, why not just give bar.pl the name of the file and have it read the XML file itself?	[reply]
Re: Re: system & shell metacharacters by snax (Hermit) on Jul 23, 2003 at 00:46 UTC
I'm with you. I'd use something like `open BAR, '\|bar.pl' \|\| die qq(Useful msg: $!); print BAR $xmldata;` [download] and let bar.pl read from STDIN. No shell at all. OP might want a glance at perlipc.	[reply] [d/l]
Re: Re: Re: system & shell metacharacters by bunnyman (Hermit) on Jul 23, 2003 at 15:58 UTC
`open BAR, '\|bar.pl' \|\| die qq(Useful msg: $!);` ... is wrong, because it is interpreted as: `open BAR, ('\|bar.pl' \|\| die qq(Useful msg: $!));` ... so remember to use "or die" rather than "\|\| die".	[reply] [d/l] [select]
Re: Re: Re: Re: system & shell metacharacters by snax (Hermit) on Jul 23, 2003 at 16:39 UTC
Re: Re: Re: Re: Re: system & shell metacharacters by vek (Prior) on Jul 23, 2003 at 18:14 UTC
Some notes below your chosen depth have not been shown here
Re: Re: system & shell metacharacters by bunnyman (Hermit) on Jul 23, 2003 at 16:02 UTC
Do not pass large amounts of data on the command line. The system only provides a certain amount of memory for that data and you can not exceed that amount.	[reply]
Re: system & shell metacharacters by bobn (Chaplain) on Jul 22, 2003 at 23:32 UTC
try `system(qw[bar.pl -p 1234 -d], $xmldata)`. Calling system() with a list takes the shell out of play. Not tested, but should work. --Bob Niederman, http://bob-n.com	[reply] [d/l]


Pathologically Eclectic Rubbish Lister
	PerlMonks