in reply to Try out Apache::PageKit online

Your form validation script appears to have some validation issues. As of this writing, this link to it causes an internal server error. I tried using a single quote in the email field as single quotes often break sites using a database. I'd be surprised if such a simple script is using any SQL, but if it is, I'd be careful. It's trivial to embed malicious SQL in a URL if the single quote is interfering with the SQL. It's a relatively common attack (and ridiculously easy).

Cheers,
Ovid

Vote for paco!

Join the Perlmonks Setiathome Group or just click on the the link and check out our stats.

  • Comment on (Ovid) Re: Try out Apache::PageKit online