Thread Sicherheit von Formulardaten: Gefährlicher User-Code (38 answers)
Opened by Gast at 2004-05-22 18:01

pq
 2004-06-02 14:37
#2511 #2511
User since
2003-08-04
12208 Artikel
Admin1
[Homepage]
user image
[quote=Troll,25.05.2004, 17:21]
Code: (dl )
1
2
3
4
5
6
7
8
9
    my @subst = (
       [q|&| => q|&|],
       [q|"| => q|"|],
       [q|<| => q|&lt;|],
       [q|>| => q|&gt;|],
       [q|'| => q|&'|],
       [q|`| => q|&`|],
   );
   $data =~ s/($subst[$_]->[0])/$subst[$_]->[1]/osg for 0 .. $#subst;
[/quote]
wieso so umständlich?
Code: (dl )
1
2
3
4
5
6
7
8
9
10
my %subst = (
     q|&| => q|&amp;|,
     q|"| => q|&quot;|,
     q|<| => q|&lt;|,
     q|>| => q|&gt;|,
     q|'| => q|&'|,
     q|`| => q|&`|,    
);
my $re = join '|', map quotemeta, keys %subst;
$data =~ s/($re)/$subst{$1}/g;
\n\n

<!--EDIT|renee|1090847427-->
Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live. -- Damian Conway in "Perl Best Practices"
lesen: Wiki:Wie frage ich & perlintro Wiki:brian's Leitfaden für jedes Perl-Problem

View full thread Sicherheit von Formulardaten: Gefährlicher User-Code