Restricted Access

[Fredrik Lundh]

"iapain" wrote:

> I've already assumed that there is no rexec for me as i am using python
> 2.4. Yeah its much more difficult that my imagination. Should I go for
> alternatives like
> 1. Assume every one who is using this webide, wont corrupt system
> 2. Use some tricks to encrypt the user path and do lots of replacement
> on user code and o/p.
>
> or something else?

unless you're willing to build a restricted runtime that runs on top of the core inter-
preter, you should assume that anyone writing a Python script that's executed by
your program has access to everything that your Python process has access to...

</F>