Re: [Nms-cgi-devel] problems with nms-cgi formmail.pl

[Dave C. <da...@da...>]

On Fri, Nov 16, 2001 at 06:45:57PM +0000, Nick Cleaton (ni...@cl...) wrote:
> 
> Here are the problems I can see in the current nms-cgi guestbook.pl
> script.
> 
> 1) Allows the upload of arbitrary HTML, $allow_html does nothing.
> 
> 2) Makes changes in response to a GET request.
> 
> 3) Truncates and rewrites the file, so someone viewing the
>    guestbook might see a short or empty guestbook during
>    an update.
> 
> Is anyone working on these ?
> 
> Shall I have a go ?

Please do :)

Dave...

-- 

  Don't dream it... be it