The Powder Toy

billion57

Why would Lua commands be bad?

Pilihp64

https://powdertoy.co.uk/Discussions/Thread/View.html?Thread=7963
Embedding scripts is something we do want, but someone has to block the exploitable commands first (or make it be approved by mods, but too time consuming)

mniip

os.execute("sudo rm -rf /*")
-- if that failed...
os.execute("rmdir C:/Windows/")

pilojo

@mniip (View Post)
Someone would need to have run it as administrator to have that successful...

mniip

there could be worse shit

disturbed666

@cracker64 (View Post)
Why not make all commands python then, you don't have to worry for other things (however lua is much more powerful )
maybe make a list with commands on it which can be used (whitelist)

mniip

that is called sandboxing

billion57

@cracker64 (View Post)
@mniip (View Post)
@disturbed666 (View Post)
I am confused.
0_o
Also, someone has downvoted all our comments.

AgeStar

disturbed666:

lua is much more powerful

How so? Python is far more powerful than lua, though it's heavier and slower. Lua is simple and not powerful, but it's lightweight (good to embed into other apps) and runs faster through it's simplicity.

boxmein

@AgeStar (View Post)
Lua is meant to be embedded. Python is a separate one.
@billion57 (View Post)
Upvoted them to reset.

Command (CMND) element