Hi, Alex!

‘।  Ÿ­¢ àì 14 2004, at 00:13 Alex Woick wrote to All:

 AW> If there is a line like this in fidoconfig:
 AW> EchoArea ANNOUNCE.OS2 /var/lib/fido/msg/a/announce.os2 -g fidonet -a
 AW> 2:244/1500 -d "[_] Announcements von OS/2 Files" 2:244/1200 -def
 AW> 2:244/1363
 AW>
 AW> then you get such an output from hpt areafix for this area:
 AW>
 AW>  S   ANNOUNCE.OS2 ........... "/usr/local/bin/hpt Announcements von
 AW> OS/2 Files"
 AW>
 AW> Hpt takes [_] as environment variable _ and expands it to the
 AW> bash-supplied path to hpt. If your area forwarding lists are generated
 AW> by a coordinator and not by yourself, and you use them without
 AW> filtering such variable references, he could inject arbitrary
 AW> variables there and let people peek at them via areafix %list. I
 AW> suggest a modification of the config file scanner. I imagine, htick
 AW> has the same problem.

What exact modifications do you propose?

    Dmitry

--- GoldED+/LNX 1.1.5