/ 
Shadowd-Connector-2.0.0
River stage zero No dependents
/ Shadowd::Connector::CGI

NAME

Shadowd::Connector::CGI - Shadow Daemon CGI Connector

VERSION

Version 2.0.0

SYNOPSIS

Shadow Daemon is a collection of tools to detect, record and prevent attacks on web applications. Technically speaking, Shadow Daemon is a web application firewall that intercepts requests and filters out malicious parameters. It is a modular system that separates web application, analysis and interface to increase security, flexibility and expandability.

Shadowd::Connector::CGI is the Shadow Daemon connector for Perl CGI applications. The module operates fully automatic and only has to be loaded/used to start its task.

METHODS

new($query)

This method is a simple constructor for an object oriented interface. It requires a CGI object as parameter.

get_client_ip()

This method returns the IP address of the client from the environment. The default key is REMOTE_ADDR, but if you are using a reverse proxy you have to change the key via the configuration file.

get_caller()

This method returns the caller from the environment. The default key is SCRIPT_FILENAME, i.e. the executed Perl script.

get_resource()

This method returns the request resource.

gather_input()

This method gathers the user input with the help of the CGI module. The CGI module gets the user input from the environment.

defuse_input($threats)

This method defuses dangerous input by overwriting the environment of the script.

gather_hashes()

This method gathers cryptographically secure checksums of the executed script.

error()

This method simply prints an error message.

AUTHOR

Hendrik Buchwald, <hb@zecure.org>

BUGS

Please report any bugs or feature requests to bug-shadowd-connector@rt.cpan.org, or through the web interface at http://rt.cpan.org/NoAuth/ReportBug.html?Queue=Shadowd-Connector. I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

It is also possible to report bugs via Github at https://github.com/zecure/shadowd_perl/issues.

SUPPORT

You can find documentation for this module with the perldoc command.

perldoc Shadowd::Connector

You can also look for information at:

LICENSE AND COPYRIGHT

Shadow Daemon -- Web Application Firewall

Copyright (C) 2014-2016 Hendrik Buchwald <hb@zecure.org>

This file is part of Shadow Daemon. Shadow Daemon is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.