in reply to Do I have to untaint all user input in a form?

Look up Data::FormValidator on CPAN. It really is worth the trouble to learn; Once you know how to use it, data validation becomes a snap.
  • Comment on Re: Do I have to untaint all user input in a form?