in reply to Do I have to untaint all user input in a form?

There was a recent node 304934 on Perl CGI scripts with tainting. Personally I think tainting is not really necessary for simple Perl scripts, -w should be enough. Besides, adding -T option in the #! line will cause mod_perl to complain, unless you follow what inman suggested in the discussion to modify your Apache configuration. Besides, you could test the CGI script from the command-line with 'perl -T script.pl' anyway, without the -T option in your #! line.

tilly has a recent node 306983 on place holders and data validation. I think you might be interested in it.

  • Comment on Re: Do I have to untaint all user input in a form?