मेसिन फोरान। अंग्रेजी आर हिंदी फोरान थांबाय गाब।English हिन्दी

14 sections show the reviewed English text because a बर’ राव translation was not available for it.

Learn
See
Try
Make

उत्तर आरो असुरक्षित कोड फोराय

What this lesson is about

हाबा उत्तर फोराय जे काम कराय आरो फोराय निफराय। निफराय मुनि, निफराय गाब, निफराय हाबा इनपुट फोराय।

जमा किया गे प्रोग्राम आफिसर सर्वर आरो upload फोल्डर साफ करै, आरो हाबा test फुराय। अब फुराय?

Why this matters

सही आरो सुरक्षित फोराय अलग सवाल, आरो test फोराय फकत पहला सवाल। उत्तर सब पास करिबा आरो folder delete करिबा, file बाहिर पठाय, या यूजर लिखाय किछु चलाय। हाबा बात फोराय जे reviewer पैसा पाबो।

हाबा लाइन नाम फोराय जे काम करिबा उत्तर असुरक्षित कराय, आरो सुरक्षित लाइन लिखाय।

Refuse three shapes: it deletes without asking, it sends data out, it runs any input.
An API key, a password or a personal detail written into the code is a failure.
बताय जे असली data मुनि चलाय की नुकसान होय, कारण हाबा review।

Task

Review an answer that cleans up an upload folder on a small office server.

Weak approach Runs it on the sample files, reads every line, and marks the answer correct because the folder came out clean. The file names in that sample were all his own.

Stronger approach Names line 14, where the file name goes into a shell command. Says a name carrying a semicolon would run anything after it.

Why the stronger approach works दुनु उत्तर मानाय जे code चलाय। फकत एक फोराय जे दूसर नाम फोराय file मुनि की होय।

Try a changed situation A colleague shares a notebook that works. On line two his own key is typed in as plain text. He says it is only for testing. What do you write?

Make something yourself एक उत्तर फोराय जे चलाय आरो असुरक्षित। ठीक हाबा लाइन लिखाय, असली data मुनि की कराय, आरो सुरक्षित लाइन।

Read the primary or official source: Python documentation · subprocess security