Skip Menu |

Preferred bug tracker

Please visit the preferred bug tracker to report your issue.

This queue is for tickets about the CGI CPAN distribution.

Report information
The Basics
Id: 109126
Status: rejected
Priority: 0/
Queue: CGI

People
Owner: Nobody in particular
Requestors: phillip.hwong [...] gmail.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Suggestion to modify the example code which makes the reader confused
Date: Thu, 19 Nov 2015 09:25:35 +0800
To: bug-CGI [...] rt.cpan.org
From: Phillip Huang <phillip.hwong [...] gmail.com>
Hello, Hi monks, I read the CGI.pm: ' http://search.cpan.org/~lds/CGI.pm-3.43/CGI.pm#USING_THE_FUNCTION-ORIENTED_INTERFACE', and then try to use function-oriented interface to run the cgi example as the manual shows, the 'error.log' shows 'root@Sparta:/var/www/cgi-bin# tail -f /var/log/apache2/error.log CGI::param called in list context from /var/www/cgi-bin/test.cgi line +22, this can lead to vulnerabilities. See the warning in "Fetching th +e value or values of a single named parameter" at /usr/local/share/pe +rl/5.18.2/CGI.pm line 404.' I ask as perlmonks, and it should use multi_param() or scalar param(), because the example return list context. It will make the reader no confused. Thanks, Phillip
Subject: Re: Suggestion to modify the example code which makes the reader confused
Date: Thu, 19 Nov 2015 09:26:18 +0800
To: bug-CGI [...] rt.cpan.org
From: Phillip Huang <phillip.hwong [...] gmail.com>
By the way, you can refer this: http://www.perlmonks.org/?node_id=1148035 On Thu, Nov 19, 2015 at 9:25 AM, Phillip Huang <phillip.hwong@gmail.com> wrote: Show quoted text
> Hello, > > Hi monks, I read the CGI.pm: ' > http://search.cpan.org/~lds/CGI.pm-3.43/CGI.pm#USING_THE_FUNCTION-ORIENTED_INTERFACE', > and then try to use function-oriented interface to run the cgi example as > the manual shows, the 'error.log' shows 'root@Sparta:/var/www/cgi-bin# > tail -f /var/log/apache2/error.log > CGI::param called in list context from /var/www/cgi-bin/test.cgi line +22, > this can lead to vulnerabilities. See the warning in "Fetching th +e > value or values of a single named parameter" at /usr/local/share/pe > +rl/5.18.2/CGI.pm line 404.' > > I ask as perlmonks, and it should use multi_param() or scalar param(), > because the example return list context. It will make the reader no > confused. > > Thanks, > > Phillip >
Rejecting. You're looking out old documentation. Refer to the latest docs here: https://metacpan.org/pod/distribution/CGI/lib/CGI.pod