From: Bertram Scharpf <lists@...>
Date: 2009-10-08T21:56:44+09:00
Subject: Re: Safe command line execution

Hi,

Am Donnerstag, 08. Okt 2009, 04:15:21 +0900 schrieb Zundra Daniel:
> 
> /usr/bin/cmd -username #{username} -password #{password}

It has already been said that this is very dangerous. Please check
the command you want to execute for something like ssh's
SSH_ASKPASS environment variable or gpg's --passphrase-fd option.

Bertram


-- 
Bertram Scharpf
Stuttgart, Deutschland/Germany
http://www.bertram-scharpf.de