in reply to Working on Deleting Sections of Text File Delimited by Newlines

print "<HTML><BODY><center>"; print "<form method=post action=http://www.nolaflash.com/cgi-bin/editi +ngscript.pl>\n"; print "<TABLE width=600>"; print "<TR bgcolor=#000066><TD colspan=2 align=center><font color=#ff +ffff>"; print "<h2>Edit Your Posts</h2></font></TD>";
why are you using CGI again?
Stop.
Get the mouse book. Or this one. Yes, they cost some money. Suck it up -- sometimes you gotta pay to play. Alternately, pore over the POD until you know it backwards and forwards.

Your checkboxes should be named box1.. boxn. How does this cause the script to break? These parameters will be available through CGI. .
It is not required to create a cgi object if you're going to use CGI ":standard". Use one or the other.
Your HTML is badly formatted compared to CGI -- if you insist on not using CGI for output (which is fine, if you know why) then remember that html code should be lower case, and all of the attributes should be quoted.
Seeing this : "All HTML tags are supported!" in your web board made my eyes roll in the back of my head. Are you filtering out javascript? what about object tags? there's a lot of maliciousness you're opening yourself up to here. Try allowing a small range of allowed tags rather than any old thing.

  • Comment on Re: Working on Deleting Sections of Text File Delimited by Newlines
  • Download Code

Replies are listed 'Best First'.
Re: Re: Working on Deleting Sections of Text File Delimited by Newlines
by andye (Curate) on Nov 27, 2001 at 18:52 UTC
    there's a lot of maliciousness you're opening yourself up to here.

    Particularly if executable SSIs are switched on. Allows the user to execute any command, I would think.

    andy.