Contributed by Brian Foy . Clients should be wary of CGI developers who don't ask a lot of questions during the development time. Consultants or developers should ask lots of questions about the concept, intent, and solution of a problem. After all, this might be how he interacts with you on email. Points about security and CGI error handling Contributed by Ram Samudrala .
Security is a non-trivial issue.
Even a complete OS has tons and tons of bugs in it that can be exploited. So, while a client may demand security, it's non-trivial to provide it. The most important feature lacking I think in many CGI programs is error handling. I've seen a few applications that don't always do this. I think ONE test of how good a CGI programmer you are is based on how well you handle error conditions.