lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


> I would like to set up the environment such that the users cannot
> 'execute' something that would be able to read/write to the host's
> operating system.

Since you mention web in the subject, have a look at the source of the
Lua live demo:
	http://www.tecgraf.puc-rio.br/~lhf/ftp/lua/#demo

This simply deletes all dangerous functions before running user code,
which works well because each query runs in a separate process. If you
need to keep a single process, then look at setfenv and sandboxing techniques:
	http://lua-users.org/wiki/SandBoxes