Another thing to understand about the legitimacy of incoming data is that even the data which is supposedly generated administratively can be tainted. It is very easy, for example, to modify hidden form fields or add custom fields to incoming form data to a script. In fact, a cracker could simply download your HTML form, modify it and submit faulty data to your CGI script from their own server. In Summary CGI scripts are as dangerous as they are useful. This is not to say that you should not use them.
Computer security is a give and take situation.
You can never be safe so long as you offer services. However, without offering services you may as well not have the computer in the first place. Thus, security becomes more about acceptable risk and emergency recovery than impregnability. It is your job to make sure that the cons of a break have far less impact than the pros of having a web site. Top 100 Animation CGI Design Graphics HTML Java Scripting Authoring Internet Location Multimedia Software WebRef Hosted by Charm Net .