I'm slightly alarmed by urls such as: http://www.cs.toronto.edu/~graves/handwriting.cgi?text=Hej&style=..%2Fdata%2Ftrainset_diff_no_start_all_labels.nc%2C973%2B

I'm slightly alarmed by urls such as: http://www.cs.toronto.edu/~graves/handwriting.cgi?text=Hej&style=..%2Fdata%2Ftrainset_diff_no_start_all_labels.nc%2C973%2B905&bias=0.15&samples=3 http://www.cs.toronto.edu/~graves/handwriting.cgi?text=Hej&s... Relative paths allowed from user input is usually a HUGE warning sign. Are you sure I can't make it open arbitrary files? What happens to your cgi script if it reads a file in the wrong format?