@@ -39,10 +39,11 @@ sub run or die $DBI::errstr; my $class = $cgi->param('_class'); die unless defined $class; + die unless $class =~ /^\w+$/; my $c = undef; my $eval = "use lib '/var/www'; use CCNQ::Proxy::$class; \$c = new CCNQ::Proxy::$class (\$cgi,\$db,\$configuration::sip_challenge)"; eval $eval; - die "use $class: $@" if $@; + die "use $class in eval($eval): $@" if $@; die "$class: new failed" unless defined $c; $c->run(); q.pl d0023377a30d302630bfd0b1b92220f1ae5dc545 Stephane Alnet stephane@shimaore.net http://github.com/stephanealnet/ccnq1.5/commit/2b17a5168f9373408b4a38c6ad1647ee830ae0fe 2b17a5168f9373408b4a38c6ad1647ee830ae0fe 2009-02-06T21:38:52-08:00 2009-02-06T21:38:52-08:00 Better protection and error indication in q.pl. 2ea1d8f06bfe4c853a12372bc9ef23f0d3b565c8 Stephane Alnet stephane@shimaore.net