if ( param('select') ) { unless (grep { $_ eq $passage } @display_files) { print br() x 2; print h1( {class=>'big'}, "*Backward Directory Traversal* hack will NOT help you here, Mighty Lamer!" ); $select = $dbh->prepare( "UPDATE guestlog SET passage=?, date=?, counter=counter+1 WHERE host=?" ); $select->execute( $passage, $date, $host ); exit; }