in reply to Hacker Proofing My First Script

More of a style nit, but all of your if (!$INPUT{'radar'}) {$INPUT{'radar'} = "false"}; statements could be replaced with:

use constant TECHNOLOGY_TYPES => qw( radar laser vascar airplane photo roadblock unknown ); for my $tech ( TECHNOLOGY_TYPES() ) { $INPUT{ $tech } ||= "false"; }

Of course that sidesteps the problem that you've used CGI and yet for some reason are doing your own query parsing (which is in itself a red flag) . . .