in reply to Re^2: Passing a regex from a CGI HTML form
in thread Passing a regex from a CGI HTML form

... NO security issues at all raise their heads as it is only me doing the input ...

"Unfortunately, Dave, that sounds a lot like Famous Last Words." :)


Give a man a fish:  <%-{-{-{-<

Replies are listed 'Best First'.
Re^4: Passing a regex from a CGI HTML form
by Linicks (Scribe) on Aug 31, 2016 at 18:24 UTC

    I know what you mean, but it is only me that knows the page address (it's on the Internet, but no way can anybody know the address, let alone guess it) - let alone do the input.

    Nick

      Never say never. Security through obscurity is not a way to go through life... things always start out as "it's safe, because it's only me", but then as things expand or others are involved, the gaping security holes are forgotten about and blamo, you're at risk (especially when using eval on user-supplied code).

        Steve, I appreciate that, but this form just parses data that is junk when copy 'n' pasted. The regex will only ever be applied to the foreach $line... plus, as I say, only me uses the form, or even knows it exists, or even knows what it does...

        Nick