prepared statement to sanitize all variable input for a query. One thing to note is that Perl DBI requires one to set the TaintIn attribute of a database handle as well as enabling taint mode to check one's SQL strings. History Perl supported tainting in setuid scripts from at least version 3.0 (released in 1989), though it was not until version 5.0 (released in 1994) that the -T switch was introduced integrating tainting into a single runtime. In 1996, Netscape implemented data tainting for JavaScript in Netscape Navigator 3. However, since support was considered experimental, it shipped disabled (requiring user intervention to activate) and required page authors to modify scripts to benefit from it. Other browser vendors never implemented the functionality. References External links Guidelines from the W3C about taint-checking CGI scripts perlsec - Perl security documentation Static program analysis Computer programming