petercable at gmail.com wrote: > Assuming the script isn't setuid, this would do no more damage than the > user could do directly on the command line. except that when the user is typing things into the command line, he *knows* that he's typing things into the command line. </F>