Re: embperl security info

2001-08-05 Thread Angus Lees
[sorry, lost the original] > >I have been doing final security checks before bringing a website live -- > >making sure that users can't manually enter post data to see things they > >shouldn't. My employer is naturally curious about any security issues that > >tend to aflict embperl/mod_perl/cgi.

Re: embperl security info

2001-08-03 Thread Akshay Arora
I think that most Embperl issues are really just Perl issues. I think one can avoid most problems by making sure that the user input is checked for double/single quotes, and backticks. Also I think it is good if you don't interpolate any user data, by putting the input in double quotes, or some ot

Re: embperl security info

2001-08-03 Thread Gerald Richter
> >I have been doing final security checks before bringing a website live -- >making sure that users can't manually enter post data to see things they >shouldn't. My employer is naturally curious about any security issues that >tend to aflict embperl/mod_perl/cgi. While we have followed common sen

embperl security info

2001-08-01 Thread Jack Cushman
Hi-- I have been doing final security checks before bringing a website live -- making sure that users can't manually enter post data to see things they shouldn't. My employer is naturally curious about any security issues that tend to aflict embperl/mod_perl/cgi. While we have followed common sen