Hello, recently I recieved a lot of mocking for my 'unsafe' mailform combined with some poor CGI script. Now I am doing some experiments and excercises figuring out what is secure content, and the so-called 'injections'. I`ve put a very basic module free code performing very simple tasks so I need some revisions, and if it`s the right way.

#!/usr/bin/perl -wT use strict; use utf8; sub pass_env { my (@pass1) = split("&", $_[0]); my ($pass2) = join("=", @pass1); my (%pass3) = split("=", $pass2); return %pass3; } sub check_mail { #use Email::Valid instead if ( (my @valid = split("@", $_[0]) )== 2 ) { #continue with regex later... return 1; } else { return 0; } } sub check_vars { #use htmlspecialchars() based check foreach (@_) { if ( /[><;():]+/ ) { return 0; } } return 1; } ## my $str = "sub=hello&mail=sometext&text=beeee mooo "; # $ENV{'QUERY_ST +RING} simulation my %hash = &pass_env($str); if ( &check_vars($hash{'sub'}, $hash{'mail'}, $hash{'text'})) { if ( &check_mail($hash{'mail'}) ) { print $hash{'sub'},"\n"; print $hash{'mail'}, "\n"; print $hash{'text'}, "\n"; } else { print "Invalid email.\n"; } } else { print "Please, fill all forms.\n"; }

so I need some opinions good or bad, no matter.


In reply to Is that a decent concept? by heatblazer

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.