OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Slawek (sgptelsatgp.com.pl)
Date: Tue Jun 19 2001 - 15:21:20 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Aaron Bentley wrote:

    > I'm writing a CGI program in C++ that sends email. I'm using Sendmail
    > for the transmission, so I need a command that lets me specify stdin for
    > Sendmail.
    > I understand popen() is not very secure, because it uses the shell to
    > execute the command, but I don't know of a safe alternative. I can
    > sanitize my input, but is escaping all non-alphanumeric characters the
    > right answer?

    pipe(2)
    dup2(2)
    stdin(4)

    bye,
    Slawek