<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
	<link rel="self" type="application/atom+xml" href="https://forum.eggheads.org/app.php/feed/topic/12086" />

	<title>egghelp/eggheads community</title>
	<subtitle>Discussion of eggdrop bots, shell accounts and tcl scripts.</subtitle>
	<link href="https://forum.eggheads.org/index.php" />
	<updated>2006-06-29T13:48:47-04:00</updated>

	<author><name><![CDATA[egghelp/eggheads community]]></name></author>
	<id>https://forum.eggheads.org/app.php/feed/topic/12086</id>

		<entry>
		<author><name><![CDATA[De Kus]]></name></author>
		<updated>2006-06-29T13:48:47-04:00</updated>

		<published>2006-06-29T13:48:47-04:00</published>
		<id>https://forum.eggheads.org/viewtopic.php?p=64442#p64442</id>
		<link href="https://forum.eggheads.org/viewtopic.php?p=64442#p64442"/>
		<title type="html"><![CDATA[Spliting arguments]]></title>

		
		<content type="html" xml:base="https://forum.eggheads.org/viewtopic.php?p=64442#p64442"><![CDATA[
Security wholes you only make yourself. If properly used it doesnt matter which bytes they use. Split is doing its job well... if needed. The thing you probably wanted to do is:<br>[join [lrange [split $arg] 1 end]]<br>or equivalent one:<br>[join [lreplace [split $arg] 0 0]]<br>or without any list functions:<br>[string range $arg [expr {[string first " " $arg] + 1}] end]<p>Statistics: Posted by <a href="https://forum.eggheads.org/memberlist.php?mode=viewprofile&amp;u=2382">De Kus</a> — Thu Jun 29, 2006 1:48 pm</p><hr />
]]></content>
	</entry>
		<entry>
		<author><name><![CDATA[honeybee]]></name></author>
		<updated>2006-06-29T13:45:36-04:00</updated>

		<published>2006-06-29T13:45:36-04:00</published>
		<id>https://forum.eggheads.org/viewtopic.php?p=64441#p64441</id>
		<link href="https://forum.eggheads.org/viewtopic.php?p=64441#p64441"/>
		<title type="html"><![CDATA[Spliting arguments]]></title>

		
		<content type="html" xml:base="https://forum.eggheads.org/viewtopic.php?p=64441#p64441"><![CDATA[
I'm using a public command tcl, though i have splited the argument <blockquote class="uncited"><div>example: [lrange [split $arg] 1 end]</div></blockquote> <br>but still if someone use reason with special chars like [ or \ the reason appeared to be <blockquote class="uncited"><div>like: {[/z]} {}) or {[whatever reason with brackets]}) </div></blockquote>, which is surely a security whole.<br>[/quote]<p>Statistics: Posted by <a href="https://forum.eggheads.org/memberlist.php?mode=viewprofile&amp;u=7174">honeybee</a> — Thu Jun 29, 2006 1:45 pm</p><hr />
]]></content>
	</entry>
	</feed>
