Re: Avoiding SQL insecurities

by ccn (Vicar)

on Jul 14, 2004 at 21:16 UTC ( [id://374445]=note: print w/replies, xml )

Need Help??

try to use taint mode in your cgi scripts (-T flag)
perldoc perlsec

Comment on Re: Avoiding SQL insecurities

Replies are listed 'Best First'.
Re^2: Avoiding SQL insecurities by samtregar (Abbot) on Jul 14, 2004 at 21:28 UTC
That won't help avoid SQL injection attacks unless you also turn DBI's TaintIn option on. Otherwise DBI will happily accept a tainted string as an SQL query. -sam	[reply]