How to program the CGI module in Perl (newbie question)

resetreset · 11-28-2008, 02:00 AM

Hi,
If I want the parameters in an HTML form to be put into an array in Perl,can I do this?:

my (@param) = $cgi->param("firstname","lastname","flat", "street", "city","state","country") ;

Disillusionist · 11-29-2008, 11:30 AM

First, I would argue against using param as the name of the array.
Second, I would always use the -T option with CGI scripts.
Third, have you tried it? and if so does it work?

Code:

my (@list_params) = $cgi->param("firstname","lastname","flat", "street", "city","state","country");

resetreset · 12-01-2008, 01:29 AM

What does -T do?

No, I haven't yet tried it (the inputting webpage hasn't been made yet), I was hoping to get an answer here before I do

Disillusionist · 12-01-2008, 02:08 AM

SAMS Teach Yourself Perl in 24 Hours

Quote:

The -T switch on the #! line enables data tainting. As data is received from external sources-filehandles, network sockets, the command line, and so on- it's marked as tainted. Tainted data cannot be used in backticks, system calls (such as open), the system command, or other places that might compromise your security.

This is basically there to stop people passing commands as a part of the data, for example:

Code:

Data; cat /etc/passwd

or:

Code:

$(rm -rf /)