From owner-freebsd-security Sun Jul 15 3:54:28 2001 Delivered-To: freebsd-security@freebsd.org Received: from internethelp.ru (wh.internethelp.ru [212.113.112.145]) by hub.freebsd.org (Postfix) with ESMTP id 012A737B401 for ; Sun, 15 Jul 2001 03:54:20 -0700 (PDT) (envelope-from nkritsky@internethelp.ru) Received: from IBMKA (ibmka.internethelp.ru. [192.168.0.6]) by internethelp.ru (8.9.3/8.9.3) with ESMTP id OAA49015 for ; Sun, 15 Jul 2001 14:54:08 +0400 (MSD) Date: Sun, 15 Jul 2001 14:54:11 +0400 From: "Nickolay A.Kritsky" X-Mailer: The Bat! (v1.49) Personal Reply-To: "Nickolay A.Kritsky" Organization: IHelp X-Priority: 3 (Normal) Message-ID: <84162803008.20010715145411@internethelp.ru> To: security@freebsd.org Subject: Safe CGI scripting Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, All. Has anybody heard of the function in kernel or standart librarys with similiar action: int isinside(const char *path1,const char *path2) that returns 1 if file referenced by path2 is "inside" the directory hierarchy referenced by path1 and 0 in all other cases. If you don't know such functions, I will try to write myself. In that case, can you advice me about the fastest/securest/compatiblest ways i can do this. Thanks for any help. ;--------------------------------------------- ; Nickolay A.Kritsky ; nkritsky@internethelp.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message