logo       
Google Custom Search
    AddThis Social Bookmark Button

Re: Setting up an Inet retrieval tool using email: msg#00070

Subject: Re: Setting up an Inet retrieval tool using email
Robert Pendell wrote:

> You would need something that would parse emails as they came in for
> commands then forward them to the right application.  Wget cannot
> directly check email for remote commands.  Plus this is very risky
> to do something like this.  It can open some nasty security holes if
> you let an application check for commands in emails.

I agree there is a security risk if the server executed random commands
received via email, but Hylton's message said that the incoming message
would contain URLs, not commands.

As long as the lines from the email are scanned to remove quotes and then
quoted on the wget command line, I don't see that there would be any notable
security risk. Am I missing something?

Tony





Try Searching:
servers, voip, java, networking, microsoft ...
<Prev in Thread] Current Thread [Next in Thread>