From: "ryemcdonald@..." Date: 2007-07-19T09:14:59+09:00 Subject: while gsub! Is there a *better* way to perform multiple substitutions to a string than this? string = '/../../....//........////../../etc/passwd' while string.gsub!(/\.\.\//,'') end it's working as is, but seems odd to me to have an empty loop.. I'm just playing with the TCPServer class.. #!/usr/bin/ruby require 'socket' port = 80 listen = '0.0.0.0' header = "HTTP/1.1 200/OK\r\nContent-type: text/html\r\n\r\n" httpd = TCPServer.new(listen, port) while session = httpd.accept request = session.gets address = session.addr[3] puts "#{address} #{request}" askfile = request.scan(/GET (.*) HTTP/).to_s while askfile.gsub!(/\.\.\//,'') end reqfile = '/var/www' + askfile reqfile += 'index.html' if reqfile == '/var/www/' if File.exists?(reqfile) file = File.new(reqfile, 'r') output = file.readlines file.close else output = 'Not Found' output += "

Unfortunately, \"#{askfile}\" does not exist on this server..

" output += '

perhaps you need more fortune:

' output += "

#{`/usr/games/fortune`}

" output += '' end session.print header session.print output session.close end