Hello. Last summer I taught a class on UNIX, Perl, CGI, SQL, and web security. The class is over, but my comprehensive class notes are still online. I believe that they are a good introduction to these subjects, taking readers with little or no prior knowledge to a relatively advanced level. We cover everything from the UNIX shell to Perl and regular expressions to CGI scripting to SQL injection attacks. What do you guys think? Is there a place on this site where I should post this appropriately?

http://andrew.absurdlycool.com/class

Edited by planetscape - linkified link; moved from Meditations to Perl News, and back again

Replies are listed 'Best First'.
Re: PERL, SQL, and Web Publishing Security
by rnahi (Curate) on Nov 21, 2005 at 11:34 UTC
    Is there a place on this site where I should post this appropriately?

    I don't think so, and I give you the main reasons.*

    I give you credit for recommending taint mode and placeholders, but here is a list of unforgivable sins in your examples and code.

    • Nowhere in your code you are using strict or warnings;
    • You call open and other functions without checking the return values;
    • You use $1 without cheking if a regular expression succeeded.
    • You use variables $a and $b as examples, but you should know that they are global variables that you should not mess with, because they are used for sorting;

    Moreover, although it isn't a mortal sin, Perl is not spelled 'PERL'.

    Free piece of advice: before writing your next would be masterpiece, have a look at our Tutorials, and try to conform to what we believe are the high standards of Perl.

    P.S. Have you seen Ovid's CGI Course?

    * These lines are not the official PM policy, but just what I personally think, although I am quite sure that many monks share the same feelings.

      I went through and fixed some of these concerns. Thanks very much for your feedback, I'm obviously learning from all of this as well.
Re: PERL, SQL, and Web Publishing Security
by davebaker (Pilgrim) on Nov 21, 2005 at 21:31 UTC
    Thanks for your contribution!