-----Original Message-----
From: Elaine -HFB- Ashton <[EMAIL PROTECTED]>


>anyone other than Webheads have better things to do than learn CGI.
It
>doesn't make them stupid, in fact, I'd almost argue that they are the
>bright ones.


Amen.

>Which is probably about 95% of the planet. Why should they care if
the
>Perl is shoddy? The web page works :)

I can see your point and I agree that a tiny initial learning curve is
a good thing but what happens when the shoddy bit of cgi is used to
execute an intrusion on the host it's based on or another machine?.
The coder has a responsibility to make sure that his work at least
pays some attention to security. And if the book doesn't cover use
warnings or use strict I doubt taint mode is in the contents.

If you thought Simons Buffy joke was bad have a look at this, you want
the Tainted Perl section...
http://www.spy.org.uk/london2600/party-2000.htm

    Dean (Packing for Belgium so not at tonight's meeting)

--
Profanity is the one language all programmers understand.
   ---  Anon

Reply via email to