in reply to Trouble passing values through hidden fields
Just glancing through your stuff, I can see some serious problems. The first thing you need to do is change your shebang line to:
The -w turns on warnings, but it's the -T that you should really pay attention to here. Specifically, read about security to appreciate the security hole that you have opened up here. As it stands right now, you've allowed someone to pass server side includes into the first Web page generated above. There may be other security problems (I'm not terribly conversant with sendmail issues, but I'd be nervous about tainted data in the To: and From: lines. merlyn mentions this danger on a response to your previous post.#!/usr/local/bin/perl5.005 -Tw
Your javascript redirect is not going to work if the person has javascript turned off (and some browsers are just plain flaky). You can redirect in Perl with the CGI module doing the following:
The last time you posted, turnstep made a suggestion that you apparently did not try:print $query->redirect('http://wwwdev.pl.ford.com/L2e/cgi-bin/ebook_in +sert_2.cgi');
If you are getting this far in your script and it fails here, this will print a short failure message which should give you more information about the error. This is one of the many things that you should never attempt without checking the return code (other things are opens, switching directories, and things that you have minimal control over).$dbh->insert_row('il2e009_bk_review',\%review) or die "Insert failed: +$DBI::errstr\n";
Hope this helps!
Cheers,
Ovid
|
|---|