if ( param('select') ) { unless (grep { $_ eq param('select') } @display_files) { if ( param('select') =~ /%/ ) { $passage = "*Null Byte Injection* attempted & logged!"; print br() x 2, h1( {class=>'big'}, $passage ); } else { $passage = "*Backwards Directory Traversal* attempted & logged!"; print br() x 2, h1( {class=>'big'}, $passage ); } $select = $dbh->prepare( "UPDATE guestlog SET passage=?, date=?, counter=counter+1 WHERE host=?" ); $select->execute( $passage, $date, $host ); exit; } open(FILE, "<../data/text/$passage.txt") or die $!;