http://qs1969.pair.com?node_id=472628


in reply to Re^2: Data::Dumper(::Simple) is your friend
in thread Data::Dumper(::Simple) is your friend

I hope you have some way of conditionally removing the CGI::Carp line in production. Otherwise anyone who finds a security hole can use it to debug their attack on your code. That can turn minor security breaches into big ones very, very quickly.

Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.

  • Comment on Re^3: Data::Dumper(::Simple) is your friend