Emil Isberg <emil(_dot_)isberg(_at_)mds(_dot_)mdh(_dot_)se> writes:
:0
| /usr/local/bin/script.pl $From $Subject
You forgot to quote the arguments that you're passing to perl, thereby
subjecting them to word breaking and filename expansion. It's
definitely a bug, and depending on the context, this could be a security
hole. Always double-quote variables containing untrusted data!
:0
| /usr/local/bin/script.pl "$From" "$Subject"
Philip Guenther
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail