Beefy Boxes and Bandwidth Generously Provided by pair Networks
"be consistent"

Re: Looking for a perl webmail

by jacques (Priest)
on Oct 12, 2004 at 13:38 UTC ( #398481=note: print w/replies, xml ) Need Help??

in reply to Looking for a perl webmail

the organization I work for has some years ago deployed a webmail client (developed by an outside person who is no longer available).

Big mistake.

I'd prefer if the webmail was written in Perl (rather than PHP or JSP as most of the candidates are) because I like Perl better than those other languages.

Why does the language matter, if you want a solution that works well? SquirrelMail works. So does IMP. You don't need to be a PHP expert to install either of them.

I'd need to patch PHP's IMAP code. Not a pretty task.

And all this time, I thought PHP was too easy. The training wheels without the bike, etc, etc.

Also, PHP may still have security vulnerabilities quite apart from those that come with the webmail itself.

And Perl is unreadable and not object-oriented. Not to mention that you cannot mix Perl code with HTML. (Have I forgotten any other false stereotypes?)

Replies are listed 'Best First'.
Re^2: Looking for a perl webmail
by tilly (Archbishop) on Oct 12, 2004 at 17:03 UTC
    Before claiming that a stereotype is false, please be sure that it is. Looking on secunia, PHP 4.3.x has had 4 security advisories this year, of which one is still unpatched. (A remote information exposure bug.) Last year they had 5 advisories of which one is still unpatched. (You can locally hijack port 80.) All of these bugs affected all operating systems that PHP is on.

    In that time Perl 5.x has had one security hole, which is now patched. That was a buffer overflow bug in the Windows version of stat.

    From that I'd say that PHP really does have a security track record that could legitimately cause concern.

Re^2: Looking for a perl webmail
by matija (Priest) on Oct 12, 2004 at 17:07 UTC
    You don't understand: I would need to change PHP! In other words, I would need to edit the C code which implements PHP's IMAP support. I can do it (I know C), but first of all the code is ugly (personal opinion) and second of all, I would have to repatch that every time a new version of PHP came out (if I had to install it do get a security fix). This is not code that would interest anybody else (since the authentication method is specific to us), so open source and/or sending patches upstream don't help.
      FWIW: I believe Squirrelmail implements its imap protocol handling component in php instead of relying on php's built-in imap support.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://398481]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others examining the Monastery: (2)
As of 2018-01-19 22:11 GMT
Find Nodes?
    Voting Booth?
    How did you see in the new year?

    Results (223 votes). Check out past polls.