Re: How to get post parameters and print/log them in Perl

Replies are listed 'Best First'.
Re^2: How to get post parameters and print/log them in Perl by marto (Cardinal) on Nov 11, 2016 at 15:04 UTC
What if `$var1` contains something like this: `my $var1 = "\\'; cat /etc/passwd";`? I'm unsure why you'd want to use sed rather than perl to write some data to a file.	[reply] [d/l] [select]
Re^3: How to get post parameters and print/log them in Perl by Linicks (Scribe) on Nov 11, 2016 at 15:36 UTC
Well, it depends on the context - for known data input, I would rather use existing tools than re-invent the wheel. In the example you gave, surely some sort of user input sanitisation goes on first? Nick	[reply]
Re^4: How to get post parameters and print/log them in Perl by marto (Cardinal) on Nov 11, 2016 at 15:49 UTC
"for known* data input, I would rather use existing tools than re-invent the wheel.* As touched on in Passing a regex from a CGI HTML form security is an issue. Here you replied to someone who is obviously struggling with the basics and provided them a foot gun... 'I use this on a couple of my CGI scripts', mentioning nothing about sanitizing the data. Since you're already using perl I see no reason why you don't just write to a file from your script rather than shelling out, running sed with no error checking. Rather than reinvent the wheel this is like taking a unicycle along with you when riding your bike. Sure you could do it, but what's the point? Seems unnecessarily messy.	[reply]
Re^5: How to get post parameters and print/log them in Perl by Linicks (Scribe) on Nov 11, 2016 at 16:09 UTC
Re^6: How to get post parameters and print/log them in Perl by marto (Cardinal) on Nov 11, 2016 at 16:15 UTC
Some notes below your chosen depth have not been shown here
Re^2: How to get post parameters and print/log them in Perl by Anonymous Monk on Nov 15, 2016 at 08:02 UTC
I just use sed ... Yeah, lots of people use perl as a replacement for bash/csh ... nothing wrong with that But even in 1994 even amateur bash programmers acknowledged the crazy insecurity of writing cgi programs in bash ... using sed from perl or bash or any programming language, to print out some CGI data into a file , its about as silly as programming can get but as actual advice to someone else, its mean and it stinks	[reply]
Re^2: How to get post parameters and print/log them in Perl by Anonymous Monk on Nov 15, 2016 at 07:48 UTC
P.S. ummm, for some reason the code tags fail here... The code tags are working fine `just like these code tags` but single-line mostly don't end up in `download code`	[reply] [d/l] [select]