in reply to Re: perlsec question
in thread perlsec question

Nah. Get your CGI parameters first, then kill %ENV before doing anything.

You can always explicitly set any ENV variables you need anyway (and should) and you should always specify the full path to any executables you use.

Regards, Helgi Briem