From 17d7ded1c314d3d99e1a5e7fcd35814db166371d Mon Sep 17 00:00:00 2001 From: christopherm Date: Tue, 12 Sep 2006 01:40:12 +0000 Subject: whitelisting $form{path} to one of two options git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@70 4979c152-3d1c-0410-bac9-87ea11338e46 --- menu.pl | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/menu.pl b/menu.pl index 69090246..bad0a4f1 100755 --- a/menu.pl +++ b/menu.pl @@ -102,10 +102,7 @@ $SIG{__DIE__} = sub { $form->error($_[0]) }; $myconfig{dbpasswd} = unpack 'u', $myconfig{dbpasswd}; map { $form->{$_} = $myconfig{$_} } qw(stylesheet timeout) unless ($form->{type} eq 'preferences'); -$form->{path} =~ s/\.\.\///g; -if ($form->{path} !~ /^bin\//) { - $form->error($locale->text('Invalid path!')."\n"); -} +if ($form{path} ne 'bin/lynx'){ $form{path} = 'bin/mozilla';} # did sysadmin lock us out if (-f "$userspath/nologin") { -- cgit v1.2.3