[Tutor] Untainting CGI parameters

[Alan G]

> I would like to untaint all parameters with which my CGI script is 
> called. Example:

Can you explain 'untaint'??? Not a term I'm familiar with...

> if parameters.has_key('type'):
>     match = re.search('\w+', parameters['type'].value)
>     type = match.group()
> else: type = 'page'

I Python "it's better to ask forgiveness than permission" so...

try:
   type = re.search('\w+', parameters['type'].value).group()
except KeyError: type = 'page'

HTH,

Alan G
Author of the Learn to Program web tutor
http://www.freenetpages.co.uk/hp/alan.gauld