Your digest suggestion for validating hidden fields is good, but I can see someone misreading that and thinking that they need to create a really random digest each time and send it.

Instead make it clear that what you mean is that the digest is kept at the webserver, and never sent. Of course leaving it static is also a bad idea, you should change it regularly. But what is important is that the CGI script can verify the hidden data, not that the user can.

Another thing that I am noticing. You may want to make some digressions into links, or produce an index at the top. Reading through your document is very different from referring back to it, and as it grows it could be hard for someone to track down interesting things you said.

In reply to RE (tilly) 1: Request for Comments - CGI Course by tilly
in thread Request for Comments - CGI Course by Ovid

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.