#
# Author: Mariusz Balewski <M.Balewski@wp.pl>
# 03.06.2004
+# 29.08.2005 Tried to fix insecure tempfile handling (untested)
#
# GPL licensed
# Feel free to send me your comments
###############################
###############################
+use File::Temp qw/ :mktemp /;
+$file = mktemp("/tmp/tmpfileXXXXXXX");
+
+
require 'comms.pl';
-system("ldapsearch -h $HOST $SIMPLEAUTH $AUTHDN $PASS \"$FINDDN=*\" $BASEDN -LLL > /tmp/ldap2abook.tmp");
+system("ldapsearch -h $HOST $SIMPLEAUTH $AUTHDN $PASS \"$FINDDN=*\" $BASEDN -LLL > $file");
$i=0;
-open(F1,"</tmp/ldap2abook.tmp") || die "$TMPERR";
+open(F1,"<$file") || die "$TMPERR";
open(F2,">$DESTFILE") || die "$DESTFILEERR";
flock(F1,8);
flock(F2,8);
close(F2);
close(F1);
-system("rm /tmp/ldap2abook.tmp");
+unlink($file);
print "\n$i ";
print "$REPORT\n\n";