Reference no: EM133269569

Suppose I wrote a simple program to take in a filename from a user and then, using that given filename my program would execute a command to copy that file to a particular location (such as my own submission directory). I then made that program executable by someone else.

For example, if they gave me a filename "dog.txt", my program would create a string called "cp dog.txt subfolder" and then execute it using the system command.

What would I need to do to ensure that nothing malicious was allowed to happen?