Taint Mode in Perl

Code Injection:

#!/usr/bin/perl
my $name = $cgi->param("name");  # Get the name from the browser
...
$dbh->TaintIn = 1;
$dbh->execute("SELECT * FROM users WHERE name = '$name';"); # Execute a SQL query

Good Links:

• http://gunther.web66.com/FAQS/taintmode.html
• http://stackoverflow.com/questions/2228457/is-perls-taint-mode-useful
• http://www.linux-praxis.de/lpic2/lpi201/perl3.html
• http://en.wikipedia.org/wiki/Taint_checking

Similar Problems in PHP:

• http://www.codehelp.co.uk/php/taint.php