using /usr/bin/id instead of environment (more secure!)

1 files changed, 3 insertions, 3 deletions

diff --git a/rhimport b/rhimport
index 46794b6..c8cfd47 100755
--- a/rhimport
+++ b/rhimport
@@ -65,10 +65,10 @@ EOF
   exit;
 }
 
-my $user = $ENV{'USER'};
-$user or die "Username not found in environment";
+my $user = `/usr/bin/id -un`;
+$user =~ s/\n//;
 
-my $dbh = DBI->connect( "DBI:mysql:$DB:$DBHOST","$DBUSER","$DBPW") or die "Database Error: $DBI::errstr";
+my $dbh = DBI->connect("DBI:mysql:$DB:$DBHOST","$DBUSER","$DBPW") or die "Database Error: $DBI::errstr";
 my $sql = qq{select USER_PERMS.GROUP_NAME,DROPBOXES.PATH from USER_PERMS, DROPBOXES where USER_PERMS.USER_NAME='$user' and DROPBOXES.GROUP_NAME=USER_PERMS.GROUP_NAME;};
 my $sth = $dbh->prepare($sql);
 $sth->execute();