From: David Masover <ninja@...>
Date: 2009-10-08T08:04:31+09:00
Subject: Re: Safe command line execution

On Wednesday 07 October 2009 02:15:21 pm Zundra Daniel wrote:
> /usr/bin/cmd -username #{username} -password #{password}

As others have mentioned, you could do system like this instead:

system '/usr/bin/cmd', '-username', username, '-password', password

But there's a security flaw in the way you're doing this -- chances are, anyone 
on the system can read those straight from the system process list. Is there 
any way to supply these credentials to that command, other than the 
commandline?