http://www.perlmonks.org?node_id=212645


in reply to [untitled node, ID 212629]

Since no one has pointed it out, yet, you really really, really do not want to do: 
if ($page) { &$page; }

[download]
What if someone (and, don't do this) passed in the URL http://www.robotskull.com/cgi-bin/index.cgi?page=kittens;`rm -rf /etc` (or worse). A better way would be to: 
if($page)
{
    SWITCH:
    {
        &kitten, last SWITCH if($page eq 'kitten');
        &foo, last SWITCH if($page eq 'foo');
        &bar, last SWITCH if($page eq 'bar');
        .
        .
        .
        print STDERR "invalid CGI parameter", last SWITCH;
    }
        
}

[download]

Enoch

In Section Seekers of Perl Wisdom