Sean O'Rourke skribis 2004-04-15 8:55 (-0700):
> [EMAIL PROTECTED] (Juerd) writes:
> > I think it has to go because `pwd`, `hostname`, `wget -O - $url`
> > should not be easier than the purer Perl equivalents and because
> > ``'s interpolation does more harm than good.
> I have to disagree with you here. The Perl way is not always the Perl
> way -- the beauty of Perl is that it makes it as easy as possible to
> take advantage of existing tools. Sometimes this is best done with a
> foreign interface like XS, but sometimes it's adequate and easier to
> simply shell out and collect the output. I don't see "purity" as a
> good motive here; in fact, rigid purity makes languages like Java and
> Smalltalk somewhere between frustrating and useless.
Yes, executing programs should still be easy. But it doesn't happen
enough to give away the beatiful backticks, in my opinion. And the
backticks encourage interpolation.
> I find that there are still plenty of contexts in which `` is nice and
> security is irrelevant.
This is the second time in this thread that I read about security being
unimportant. I still don't know what to say about it, though I feel like
ranting.
> Of course, I'd be fine with the slightly longer "qx{}"...
IMHO, best would be to have only readline (which should take a
system()-like LIST!), and I think qx is acceptable. But `` is too nice
to sacrifice, and makes it too easy to not think about security.
Probably you know when you can use qx safely, but many, MANY people out
there have no clue whatsoever and use qx with interpolation *because* it
is easy.
Juerd
