[CentOS] bash - safely pass untrusted strings?

On Tue, Feb 26, 2008 at 04:33:30PM -0600, Les Mikesell alleged:
> Does anyone have a quick reference to the order of operations as the 
> shell parses a command line (variable parsing,i/o redirection, wildcard 
> and variable expansion, splitting on IFS, quote removal, command 
> substitution etc.)?  That's really the first thing you need to know 
> about the shell and if there is a simple description it must be buried 
> in the middle of some obscure manual.

This is from the "EXPANSION" section of the bash manpage:

       The  order  of  expansions  is:  brace expansion, tilde expansion, parameter, variable and arithmetic
       expansion and command substitution (done in a left-to-right fashion), word  splitting,  and  pathname
       expansion.

-- 
Garrick Staples, GNU/Linux HPCC SysAdmin
University of Southern California

Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.centos.org/pipermail/centos/attachments/20080226/ef5cf375/attachment-0001.sig>