Re: ENV variables in external scripts



Hi,

> My next query is when I tried to retrieve the CallerId from a Mysql DB
> using the same perl script with,
> 
> ---------
> use Mysql;
> :
> :
> $status = $db->Mysql::query("SELECT IF(EXISTS(SELECT callerid FROM
> auth WHERE callerid='$RAD_REQUEST{/'Calling-Station-Id'/}'),'y','n')");

your escape characters are wrong

$RAD_REQUEST{\'Calling-Station-Id\'}

personally, i would set the value into a local variable and do some
sanity checking to ensure it'll not screw up the SQL... a nasty
person could do something trivial like set their Calling station id
to "'; drop all from users" :-)

alan




This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.