Cgi::validop::check module to validate sql.
Fails if incoming value contains characters other than: \w \s . : [ ] _ ^ * / % + - <> = ~ ! @ # & | ` ? $ ( ) , ; ' "
Named \*(L"safer\*(R" since allowing users to write \s-1SQL\s0 can never be truly \*(L"safe.\*(R" This check attempts to allow only things which will not harm data. It doesn't prevent a clever query from wreaking other havoc, though, like a \s-1DOS\s0.
Just like \*(L"safer\*(R" but allows '\s-1SELECT\s0'.
Randall Hansen <[email protected]>
Copyright (c) 2003-2007 Randall Hansen. All rights reserved.
This program is free software; you may redistribute it and/or modify it under the same terms as Perl itself.
See http://www.perl.com/perl/misc/Artistic.html