Re^2: CGI::param called in list context from package

thank you for taking the trouble to make me know this. im relieved im not in no mans land then! folks like you make perl understandable for beginners.
However based on a quick test of the application after a cpanm update to CGI v4.09 i still see the error/warning in my apache logs.
CGI::param called in list context from package CGI::Session line 364, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter"
Do let me know if there is any way i can check if the issue is on my side. My detailed code is put up above.
the pertinent call is

   my $session = $self->session();
   my $query = $self->query();
    

#clearing the session before writing new values.
 
   $session->clear();
   $session->save_param();
[download]

Do not wait to strike when the iron is hot! Make it hot by striking - WB Yeats

Comment on Re^2: CGI::param called in list context from package Select or Download Code

Replies are listed 'Best First'.
Re^3: CGI::param called in list context from package by leej (Monk) on Oct 27, 2014 at 15:22 UTC
A ha! It looks like CGI::Session is calling ->param in list context with arguments: https://metacpan.org/source/MARKSTOS/CGI-Session-4.48/lib/CGI/Session.pm#L364 The temp solution to this is to set the following in your code: `$CGI::LIST_CONTEXT_WARN = 0` An issue needs to be raised against CGI::Session to change it to use multi_param or switch off the warning. The slight irony is that i took over maintenance of CGI from Mark, the current author of CGI::Session...	[reply] [d/l]
Re^4: CGI::param called in list context from package by leej (Monk) on Oct 27, 2014 at 15:27 UTC
I have raised https://rt.cpan.org/Ticket/Display.html?id=99839 on rt.cpan.org.	[reply]
Re^5: CGI::param called in list context from package by perlron (Pilgrim) on Oct 27, 2014 at 15:41 UTC
thanks! thats very helpful sir! I would like to add that during my testing i found that even calling save param with `$session->save_param(scalar $query->param('param_name'))` OR even `$session->save_param($query->param('param_name')` was causing my module to die without writing to the logs. I had mentioned this in the initial post . Do not wait to strike when the iron is hot! Make it hot by striking - WB Yeats	[reply] [d/l] [select]
Re^6: CGI::param called in list context from package by leej (Monk) on Oct 27, 2014 at 16:00 UTC
Re^4: CGI::param called in list context from package by perlron (Pilgrim) on Oct 27, 2014 at 15:38 UTC
he he.. i just casually chatted online with mark earlier last week, about how i loved his contribution to CGI:Application. I find the api very intuitive (call me lame to still like CGI::Application :D) btw.. i am still getting the error in my logs..im not sure why. Do not wait to strike when the iron is hot! Make it hot by striking - WB Yeats	[reply]
Re^5: CGI::param called in list context from package by leej (Monk) on Oct 27, 2014 at 15:56 UTC
You're getting the errors still even setting: `$CGI::LIST_CONTEXT_WARN = 0` in your code?	[reply] [d/l]
Re^6: CGI::param called in list context from package by perlron (Pilgrim) on Oct 28, 2014 at 07:21 UTC
Re^4: CGI::param called in list context from package by Anonymous Monk on Feb 05, 2015 at 13:06 UTC
this works! $CGI::LIST_CONTEXT_WARN = 0	[reply]