Re^2: Data::Dumper(::Simple) is your friend

[neniro]

When I debug Webapplications I use Data::Dumper and CGI::Carp like this:

use CGI::Carp qw/fatalsToBrowser warningsToBrowser/;
use Data::Dumper;

# ...

die Dumper $cgi;

[tilly]

I hope you have some way of conditionally removing the CGI::Carp line in production. Otherwise anyone who finds a security hole can use it to debug their attack on your code. That can turn minor security breaches into big ones very, very quickly.

Google for advice on SQL Injection attacks to see a practical example of how attackers can use this debugging information to make their job a lot easier.