You should not use HTTP request parameters as filenames
One corollary of the danger of over-powerful introspection is that you should not use HTTP requestparameters directly as filenames for any reason, not just to avoidhard-coding allowed commands in your web application. Any time that youuse a request parameter as a filename, you create an opportunity for anattacker to escape from whatever directory your application is supposedto get its files from and thus to rummage all over your system.
(In fact, you should not directly use the URL for a filename either,because someday
瘦虎肥龍爭霸戰‧四
星期五晚簡直無攪好訓, 一來全身發滾, 滴汗不出, 二來蜜柑和Ding Ding終於展開正面衝突,
現在才tip
覺得還是8號熊穎詩比較好。
樣貌方面，3、4都ok。
我又重看了《其後》
重看的理由很古怪，有一天太太看報紙見到松田龍平的孩子出世了，她就跟我說松田優作榮升祖父了，於是我就說，不如找一部他的電影看看，當作為他慶祝吧。
岩洞裡的聖誕樹
改版及其他
說出來你也許不相信，我改版，只因發現原來這個blog一直在用舊版本，現在已經多了很多新功能，於是就貪玩試一下，一試就試到要把舊有的七百幾篇文章找出來重新標籤和分類，真
好馬不吃回頭草
心水清的讀者一定注意到，「printer」這個字已大半年沒有在小妹的專欄出現過。當我還在攬住個水泡深呼吸再閉氣，突然有人大喊一聲：「Party Time！」大夥兒就跑去開嘉年華。我呆呆
A gotcha with Python's new signal.siginterrupt()
Python 2.6 added a siginterrupt() function to the signal module , so that you can dealwith the EINTR problem . Unfortunately it doesn'tnecessarily do what you want, because of CPython signal handlersemantics .
(Ob-attribution: signal.siginterrupt() was brought to my attention bya commentator on the EINTR entry .)
What you probably want when you combine siginterrupt() and a signalhandler, and what a lot of people probably think that they are getting,is that when your program
去舊迎新
