Program or API for saving Variables as loadable files

save.variable("passwordmenu", "5464")

set passwordmenu = 5464
end

while true do
shell.run("passwordmenu") -- loads the Variables
print("please enter password")
input = io.read("*")
 if input == passwordmenu then
  print("Welcome")
 else
  print("invalid input: ", input)
 end
end

local filePath = "some/path/andFile"

local function loadPass()
  local handler = fs.open(filePath, "r")
  if handler then
	local pass = handler.readLine()
	handler.close()
	return pass
  end
  print("Cannot open file for read")
  error()
end

local function savePass( pass )
  local handler = fs.open(filePath, "w")
  if handler then
	handler.write(pass)
	handler.close()
	return true
  end
  print("Cannot open file for write")
  error()
end

Lithia, on 05 February 2013 - 03:18 PM said:

the variable files could be also used to save Useful variables and load them when the program starts back up again
like passwords and important data Created by the program its self

Lithia, on 05 February 2013 - 03:18 PM said:

set passwordmenu = 5464
end

so i could do

while true do
shell.run("passwordmenu") -- loads the Variables
print("please enter password")
input = io.read("*")
if input == passwordmenu then
  print("Welcome")
else
  print("invalid input: ", input)
end
end

1 end while true do turtle.dig() turtle.forward() end

PhilHibbs, on 05 February 2013 - 10:14 PM said:

Lithia, on 05 February 2013 - 03:18 PM said:

set passwordmenu = 5464
end

so i could do

while true do
shell.run("passwordmenu") -- loads the Variables
print("please enter password")
input = io.read("*")
if input == passwordmenu then
  print("Welcome")
else
  print("invalid input: ", input)
end
end

He he, ever heard of an injection attack? That's where someone sets their password to:

1 end while true do turtle.dig() turtle.forward() end

So you need some validation around the password entry if you're going to allow other people to enter passwords that will be stored in this manner. If you're hard-coding the password yourself so only you can access it, then this kind of attack is not a problem. Also this probably isn't running on a turtle.

I just realised that the password file is execute as a series of CraftOS commands and not as lua script, so my example won't work. I don't know if there is a way of injecting into a CraftOS script in the same manner, I can't find a CraftOS command list or syntax reference anywhere. But the principle is, never execute anything that a user has entered unless you have validated that it cannot contain anything executable.

PhilHibbs, on 05 February 2013 - 10:14 PM said:

He he, ever heard of an injection attack? That's where someone sets their password to:

1 end while true do turtle.dig() turtle.forward() end

So you need some validation around the password entry if you're going to allow other people to enter passwords that will be stored in this manner. If you're hard-coding the password yourself so only you can access it, then this kind of attack is not a problem. Also this probably isn't running on a turtle.

loadstring(theFileData)()

Lithia, on 05 February 2013 - 03:18 PM said:

Does any pro know of a program or api or would like to create a program
that saves a single lined file that can be loaded by another program for example

API would be

save.variable("passwordmenu", "5464")

which would generate a file called passwordmenu looking like

set passwordmenu = 5464
end

so i could do

while true do
shell.run("passwordmenu") -- loads the Variables
print("please enter password")
input = io.read("*")
if input == passwordmenu then
  print("Welcome")
else
  print("invalid input: ", input)
end
end

the variable files could be also used to save Useful variables and load them when the program starts back up again
like passwords and important data Created by the program its self

PixelToast, on 06 February 2013 - 04:36 PM said:

comparison:

Spoiler

textutils:

{[1]="something",[2]="something",[3]="something"}

infutil:

{"something","something","something"}

Pharap, on 06 February 2013 - 06:25 PM said:

io isn't a valid API

TheOriginalBIT, on 06 February 2013 - 06:32 PM said:

How does infutil handle key/value? Or is it only indexes it removes the key for?

  local result = "{"
  local aset=1
  local comma=false
  for k,v in pairs(t) do
   comma=true
   if k==aset then
	result = result..serializeImpl(v)..","
	aset=aset+1
   else
	result = result..("["..serializeImpl(k).."]="..serializeImpl(v)..",")
   end
  end
  if comma then
   result=string.sub(result,1,-2)
  end
  result = result.."}"
  return result

PixelToast, on 07 February 2013 - 01:07 PM said:

it works the same with textutils but cleans up a bit
here is the segment that actually handles the tables:
-snip-
it also removes the extra comma at the end of the table

t = {
  "Hello There",
  question = "whats your name?",
  "Thats a nice name",
  ["self obsessed statement"] = "My name Bob is more awesome than yours",
}

{ "Hello There", ["question"] = "what is your name?", [3] = "Thats a nice name", ["self obsessed statement"] = "My name Bob is more awesome than yours" }

local aset=1 -- look for the first index
for k,v in pairs(t) do -- indexes greater than zero will ALWAYS go in order
    if k==aset then -- if its the next index then compress
        result = result..serializeImpl(v)..","
        aset=aset+1 -- look for the next index
    else -- normal serialization
        result = result..("["..serializeImpl(k).."]="..serializeImpl(v)..",")
    end
end

PixelToast, on 07 February 2013 - 04:43 PM said:

EDIT:
nope