http://qs1969.pair.com?node_id=472377


in reply to Re: Data::Dumper(::Simple) is your friend
in thread Data::Dumper(::Simple) is your friend

When I debug Webapplications I use Data::Dumper and CGI::Carp like this:
use CGI::Carp qw/fatalsToBrowser warningsToBrowser/; use Data::Dumper; # ... die Dumper $cgi;

Replies are listed 'Best First'.
Re^3: Data::Dumper(::Simple) is your friend
by tilly (Archbishop) on Jul 05, 2005 at 22:32 UTC
    I hope you have some way of conditionally removing the CGI::Carp line in production. Otherwise anyone who finds a security hole can use it to debug their attack on your code. That can turn minor security breaches into big ones very, very quickly.

    Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.