http://qs321.pair.com?node_id=67944


in reply to Re: "eval" variable in non-perl statment?
in thread "eval" variable in non-perl statment?

Thanks, and I understand the security issues here. Its not really a case of evaling what the user has input as it is just expanding a variable in a template context. We will probably use the Text::Template module. The template file is to be kept inside of a configuration managed directory with controlled access, so it would be pretty hard to put something damaging in there, and the perp would leave tracks in the config management system.
  • Comment on Re: Re: "eval" variable in non-perl statment?