[Zope] Creating files on server

Tino Wildenhain tino@wildenhain.de
Tue, 24 Apr 2001 18:17:23 +0200


Hi,

>
> Failing that, use an external method:
>
> def write_stuff(self,path,stuff):
>    f = open(path,'w')
>    f.write(stuff)
>    f.close()
>
> cheers,
>
I would recommend to have a closer look what is to be written where.
May be the path and the name of the file could be hard-coded or
at least filtered. Otherwise there is a very big security hole!

Regards
Tino