perltaint

showing error Insecure dependency in parameter 3 of DBI::db=HASH(0xa32bd40)->do method call while running with -T switch

i got the error Insecure dependency in parameter 3 of DBI::db=HASH(0xa32bd40)->do method call while running with -T switch while i modified the file show_bug.cgi

what is the reason?

Solution

  • To untaint a variable, you must match it against a capturing regular expression. See perlsec - Perl Security for details.