tintin++ for Debian ------------------- The #sys command should be used with care, as it's easy to trick the client to execute unwanted system commands via triggers. An example of an exploitable trigger could be: #action {Bob says %0} {say %0} If Bob says 'Hi ; #sys rm -rf *', you'd be in trouble. The correct way of doing this would be: #action {Bob says %0 ;} {say %0} 1 #action {Bob says %0} {say %0} 2 Tintin++ should be patched so it strips "\" and ";" from the #action function. -- Jordi Mallach , Tue, 4 Sep 2001 18:02:10 +0200 With modifications by Christopher Sacca on Thu, 3 Feb 2005 11:07:21 -0500