The problem here is not necessarily an input validation problem. Thesystem call's function is to execute a command specified in a string.The problem, in this case, is the context of the call. The ...
Where I work, we have an app than runs as a DOS application on a Windows Small Business Server. The app is compiled PHP. The app basically takes a bunch of ~3MB jpg images as input and generates ...