CGI Programming 101: Chapter 16: Writing Secure Scripts

The text and programs here are from the first edition of CGI Programming 101. This has been replaced by the 2nd edition; please click here to view the updated material from the 2nd edition.

Name Description

man.txt source code for man.cgi - an example of taint checking in a CGI.

man.html Working demo of the above script.

envman.txt source code for envman.cgi - works like man.cgi except it accepts a parameter via $QUERY_STRING

envman.cgi?perlsec Example - the perlsec (Perl security) man page

Additional Resources

perlsec man page
The CGI/Perl Taint Mode FAQ
The WWW Security FAQ covers a range of web-related security topics, and includes a section on CGI Security.
Apache suEXEC Support

Table of Contents | Order the Book | CGI101 Home

	`Name`	`Description`
	`man.txt`	source code for man.cgi - an example of taint checking in a CGI.
	`man.html`	Working demo of the above script.
	`envman.txt`	source code for envman.cgi - works like man.cgi except it accepts a parameter via $QUERY_STRING
	`envman.cgi?perlsec`	Example - the `perlsec` (Perl security) man page