On Mon, Apr 16, 2001 at 12:03:21PM -0600, Ray Calkins 100660207 wrote:
: Hello All:
:
: I'm want to write a few CGI programs for my web site, but I've heard there are
: some (unspecified) security issues with Perl and CGI. How can I avoid leaving
: myself open?
WRT Perl, you can eliminate most major problems with the use of '-T'.
Make sure your CGIs start with these lines:
#!/path/to/perl -wT
use strict;
If you can get your program to run clean under that environment, you
should be OK for the most part.
: I have read http://www.csclub.uwaterloo.ca/u/mlvanbie/cgisec/ "CGI Security:
:Tutorial", but it's a little over my head still.
:
: Any other recommendations?
Don't forget to read perlfaq9.
Enjoy!
--
Casey West