鐃緒申鐃緒申味鐃緒申鐃叔はわ申鐃緒申泙鐃緒申鐃緒申鐃�taint mode鐃殉でわ申鐃緒申鐃緒申半匆陲靴鐃緒申鐃祝￥申鐃緒申鐃緒申廛襯鰹申鐃緒申匹鐃緒申鐃緒申鐃�-T鐃緒申弔鐃緒申討鐃緒申鐃塾は￥申鐃緒申鐃旬醐申里鐃塾でわ申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃盾し鐃緒申泙鐃緒申鐃�


達鐃粛に学わ申Perl/CGI道鐃緒申
鐃緒申鐃緒申 鐃緒申
[鐃緒申] Perl 鐃緒申 -T 鐃緒申鐃緒申鐃獣ワ申
鐃緒申鐃楯」わ申鐃緒申鐃緒申鐃叔わ申鐃緒申鐃緒申鐃緒申

Amazon鐃殉￥申鐃緒申鐃獣トプレイ鐃緒申鐃叔はプワ申潺鐃緒申鐃緒申佞鐃緒申鐃緒申鐃獣てまわ申鐃緒申鐃緒申鐃緒申鐃緒申鐃銃もそ鐃緒申覆鐃緒申鐃緒申討聾鼎鐃緒申覆辰討覆鐃緒申茲�鐃祝わ申廚鐃緒申泙鐃緒申鐃�

他鐃祝わ申鐃緒申磴�鐃緒申鐃緒申仂匆鐃緒申

鐃緒申鐃旬わ申鐃緒申鐃淑居申鐃緒申鐃叔わ申鐃緒申鐃緒申O'Reilley鐃緒申CGI鐃旬わ申-T鐃春わ申鐃緒申鐃獣わ申鐃処う鐃祝思わ申鐃殉わ申鐃緒申

鐃縦わ申鐃叔に￥申添鐃緒。

[鐃緒申] Perl 鐃緒申 -T 鐃緒申鐃緒申鐃獣ワ申
鐃緒申鐃薯すわ申砲鐃緒申歃鐃緒申鐃宿�鐃竣￥申鐃純え鐃緒申5鐃緒申鐃旬わ申焚鐃緒申里茲�鐃祝わ申鐃緒申鐃�OK鐃緒申 
    5  if ($fn =~ /^([a-z0-9]+)$/i) {$fn = $1} else {die}

鐃緒申鐃緒申鐃緒申鐃緒申鐃塾は￥申鐃緒申鐃緒申鐃緒申抜愎鐃緒申鐃書いてわ申襪�鐃夙￥申鐃純え鐃緒申....

my $re_filename =  qr/[0-9A-Za-z_][0-9A-Za-z_\.]+/; # .foo is NG, foo.bar is OK
sub untaint_filename{
    my $name = shift;
    die "$name is insecure" unless $name =~ /^($re_filename)$/;
    return $1;
}

鐃淑わ申鐃緒申Taint Mode鐃緒申飽鐃緒申足鐃緒申覆鐃緒申佑鐃�Safe鐃祝わ申挑鐃緒し鐃銃みわ申箸鐃緒申鐃緒申任鐃緒申腓�鐃緒申鐃緒申鐃緒申鐃緒申呂鐃緒申鐃祝細わ申鐃緒申鐃緒申鐃醇が鐃緒申能鐃叔わ申鐃緒申

Dan the Securer (but Never Secure Enough) Perl Monger