I do like a lot of the online resources, including Ovid's tutorial, but sometimes I'm really pedantic and like to have an actual book in front of me.

I'd recommend CGI Programming with Perl, 2nd Ed from O'reilly (please forgive me, but I can't remember the author ATM). Chapter 9 is about security, including taint checking with -T. It also gives some great general advice, and demonstrates various styles of creating your CGI scripts (such as using the CGI module via a functional or OOP style interface, or having CGI generate your HTML versus using a here doc)

~Brian

In reply to Re: Securing CGI scripts by brianarn
in thread Securing CGI scripts by Fingo

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.