Hacker News new | ask | show | jobs
by userbinator 3287 days ago
Note that wordexp() will also, unless explicitly told otherwise, perform command substitution and thus is capable of executing other processes. Be wary of using it on untrusted input.