Re: Creating a Logon Form

2008-12-10 Thread John W. Krahn
[EMAIL PROTECTED] wrote: Hey All, Hello, I'm new to doing CGI with Perl and so am a little lost here. I'm working on a web-accessible database system for a (rather large) group of area churches and went through the rigmarole of assessing various programming and scripting languages to see whi

RE: Creating a Logon Form

2008-12-10 Thread Hellman, Matthew
If you're serious about security, you have some work to do;-) This application is very likely vulnerable to SQL injection and XSS injection. 1) for all CGI scripts, turn on taint and strict mode, and then sanitize your input. There are many ways to sanitize your input, but you might start with

RE: Creating a Logon Form

2008-12-10 Thread Dermot Paikkos
> Hey All, Hi > I'm new to doing CGI with Perl and so am a little lost here. ... > > Register > > Logon > > Username: > > Password: > > > > This works for me. If I post your form to this: #!/usr/bin/perl use st

Re: Creating a Logon Form

2008-12-10 Thread PekinSOFT
Greg, Thank you for your prompt reply. Here is the whole script for accessing the database: logon.cgi #!/usr/bin/perl use CGI; use DBI; my $co = new CGI; my $dsn = 'DBI:mysql:bos_db:localhost'; my $db_user_name = 'sean'; my $db_password = '{MyPassword}'; my ($id, $p

Re: xml::xslt and regexes

2008-12-10 Thread Sean Davis
On Tue, Dec 9, 2008 at 8:09 PM, Chris Cosner <[EMAIL PROTECTED]> wrote: > Question: What is the speediest tool to pull data from an xml feed that will > only be a few hundred lines at most? Some regexes will be necessary. > > Context: > I am playing with the google books data api. They provide a fe