in reply to Securing HTML query strings

Look at Removing malicious HTML entities (now with more questions!). I just had the same problem and the monks suggested a myriad of fixes and ways to secure input ;D

I'm so adjective, I verb nouns!

chomp; # nom nom nom

Replies are listed 'Best First'.
Re^2: Securing HTML query strings
by rooneyl (Sexton) on Aug 16, 2008 at 20:37 UTC
    I have read the article, it is very good.
    I am not sure how helpful using any CGI modules are to me. I process the elements from the form using the code;
    my $form_element = $ARGS{form_element};
    not
    my $form_element = $query->param("form_element"); (as is the case when using CGI).
    Is there any other modules that do something simular not relating to CGI?
[reply]

      Yes, HTML::Entities. I just grouped it with the getting of the parameter (it is not limited to CGI forms).

      I'm so adjective, I verb nouns!

      chomp; # nom nom nom
[reply]
        Just tried it out, and it works great!
        Thank you very much.
[reply]

In Section Seekers of Perl Wisdom