Re^2: Data::Dumper(::Simple) is your friend

When I debug Webapplications I use Data::Dumper and CGI::Carp like this:

use CGI::Carp qw/fatalsToBrowser warningsToBrowser/;
use Data::Dumper;

# ...

die Dumper $cgi;
[download]

Comment on Re^2: Data::Dumper(::Simple) is your friend Download Code

Replies are listed 'Best First'.
Re^3: Data::Dumper(::Simple) is your friend by tilly (Archbishop) on Jul 05, 2005 at 22:32 UTC
I hope you have some way of conditionally removing the CGI::Carp line in production. Otherwise anyone who finds a security hole can use it to debug their attack on your code. That can turn minor security breaches into big ones very, very quickly. Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.	[reply]

Replies are listed 'Best First'.

Re^3: Data::Dumper(::Simple) is your friend
by tilly (Archbishop) on Jul 05, 2005 at 22:32 UTC

Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.

[reply]