Middleware: Using C as the engine, Lua for Adapters…is this bad practice (Security risk)?

manpreet Best Answer 2 years ago

I am an integration consultant and tend to use C and Lua in my spare time, unfortunately it is not my day job ;-(

Anyway, I tend to believe that a mixture of C and Lua is perfect for many "product" developments. I currently have an "adapter engine" built in pure C, but would like to actually move the adapter code to Lua....

For example, coding an EMAIL adapter in Lua is far easier than in C...yet I like the "engine speed of C"....

But now there is the big question of security risk in that the user can potentially add whatever he or she wants to the LUa scripts in production.....obviously there we could CHMOD the files...but is that really secure?

Ideally I want the C / Lua combination here....but now do I literally imbed the Lua code in the C application with a CHAR*....or do I issue a lua_dofile??

Thanks for the help

Lynton