From: unbewusst.sein@... (=?ISO-8859-1?Q?Une_B=E9v?= =?ISO-8859-1?Q?ue?=)
Date: 2008-05-04T01:30:02+09:00
Subject: Re: something straange with cgi

Michael Granger <ged@FaerieMUD.org> wrote:

> The examples are in Perl, but most of the same principles apply to  
> Ruby too.

Fine, thanks for the refs.

In the mean type i've added a regexp checker on input string which
verify that the string is only made up with a-zA-Z0-9 and '-' only.
I believe this is enough...
After that i untaint the search variable.

-- 
Une B�vue