Beefy Boxes and Bandwidth Generously Provided by pair Networks
laziness, impatience, and hubris
 
PerlMonks  

Re^2: Data::Dumper(::Simple) is your friend

by neniro (Priest)
on Jul 05, 2005 at 07:56 UTC ( #472377=note: print w/replies, xml ) Need Help??


in reply to Re: Data::Dumper(::Simple) is your friend
in thread Data::Dumper(::Simple) is your friend

When I debug Webapplications I use Data::Dumper and CGI::Carp like this: 
use CGI::Carp qw/fatalsToBrowser warningsToBrowser/;
use Data::Dumper;

# ...

die Dumper $cgi;

[download]

Replies are listed 'Best First'.
Re^3: Data::Dumper(::Simple) is your friend
by tilly (Archbishop) on Jul 05, 2005 at 22:32 UTC
    I hope you have some way of conditionally removing the CGI::Carp line in production. Otherwise anyone who finds a security hole can use it to debug their attack on your code. That can turn minor security breaches into big ones very, very quickly.

    Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.

[reply]

In Section Meditations

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?

www.com | www.net | www.org
Node Status?
node history
Node Type: note [id://472377]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others lurking in the Monastery: (6)
As of 2023-02-01 14:58 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    I prefer not to run the latest version of Perl because:







    Results (10 votes). Check out past polls.
    Notices?