http://www.perlmonks.org?node_id=350119


in reply to Re: Re: CGI::Application vs CGI::Builder
in thread CGI::Application vs CGI::Builder

Even better: Since I have no need to send something to eval from my domain, I will put all the code to execute in the Makefile.PL avoiding any "insane suspect".

I need just to check the version number, so I think that something like this could be ok:

; my $dist = 'CGI::Builder'; ; my $vers = 1.21 ; ; my $LWP_installed = eval {require LWP::Simple} ; ; if ( $LWP_installed ) { my $current_vers = LWP::Simple::get ( "http://perl.4pro.net/check_version.cgi" . "?DISTRIBUTION=$dist&VERSION=$vers&PERL=$]-$^O +" ) ; if ( $current_vers > $vers ) { print 'This is an OLD VERSION! ... bla, bla ' } else { print 'Version OK ... bla, bla' } }

If there are no objection, I will change all my Makefile.PL with that code in the next version.
(I will update all my new distribution in a day or so).

Regards

Domizio Demichelis

Replies are listed 'Best First'.
Re: Re: Re: Re: CGI::Application vs CGI::Builder
by pudge (Sexton) on May 06, 2004 at 21:12 UTC
    Domizio:

    The problem is that you do NOT have any right to know that I installed your module from the CPAN, and it IS an invasion of my privacy for you to grab my IP address. When I intentionally go to your web site with my browser, it is a given that I am choosing to have you record who I am. Here, you are doing it without my permission or knowledge. You are capturing data about me against my will, which is a de facto breach of my privacy.

    There's no two ways about it.

    Your idea is not bad, but is done incorrectly. The whole thing would be solved if you asked permission before fetching it. I know that is a burden, but tough. You do not have the right to collect my data without my persmission, explicit or otherwise.

      Thank you for your feedback, I wrote a post about this matter that may be of your interest: http://www.xray.mpe.mpg.de/mailing-lists/modules/2004-05/msg00211.html Regards Domizio
Re: Re: Re: Re: CGI::Application vs CGI::Builder
by MidLifeXis (Monsignor) on May 04, 2004 at 16:26 UTC

    One slight problem - if you have a system that cannot talk directly to the outside world, then your Makefile assumes that the version is OK. The code doesn't fail, it just makes an assumption (proper or improper) that no news is good news.

    --MidLifeXis