Security aware programming(11)

• Issues with open:

  • open(F, $file); # read by default, or...
  • open(F, ">$file"); what if $file eq ">name", or "&NAME" ?
  • better solutions: open(F, "> $file"); open(F, ">", $file); sysopen(F, $file, O_WRONLY, 0600); open(C, "-|", "ls", "-al");