in reply to Re: CGI Error Handling
in thread CGI Error Handling
Whilst this is great to use when you're developing a
script, I wouldn't advise using it in production code. This
is because the error messages that it gives can be a source
of useful information for anyone trying to crack your site.
In some cases, just knowing that you've got Perl installed
on you server can give crackers a head start.
Error messages like this belong in the server error
log where the webmaster can read them. There's a good
reason why Apache gives a plain 500 error page by
"The first rule of Perl club is you do not talk about
-- Chip Salzenberg