, , , , ? , , , , , system() execv(), Windows Unix , . , , PATH , .
If you transfer the string, in whole or in part, and run it, you also leave yourself open to the user accessing the system by entering a command that may be corrupted. For instance. Imagine you have implemented a file search with find /home -name, and your users:
"%" -exec rm {} \;
Oh!
source
share