Re^3: The most powerful CMS developed in Perl (not spam, sounds that way) (without functions)

[Anonymous Monk]

There is no SQL injection, all code is protected. Please supply any example where it is not.

I linked the xample. 1) you don't use $dbh->quote, 2) you don't use placeholders 3) you interpolate variables into $dbh->do

2. CGI is bloated. The internal method is MUCH faster.

*sigh* So you didn't read use CGI or die, congratulations, this is the last time I give you advice :)

Don't have enough functions ...

:|

4. No strict refs impossible when using &{$..} as far as I'm aware.

Gee, kinda why I said to use pluggable and real actual modules not .functions

Have a nice day

[Anonymous Monk]

Here goes… 1. $dbh_quote is used all over, but not when it's not required where the variables have been pre-checked by parent modules. This is faster. 2. The denial of service you refer to I presume is the overloading of URI data, to be fair there are much easier ways to create a DOS attack than this. This I think should be left to the web server. Otherwise, you haven't given any credible explanation as to why CGI should be used over the internal method. 4. Not possible without object orientation. Nothing wrong with &{$_} either.

[chromatic]

The denial of service you refer to I presume is...

You presume? You said "It already features the best security system of any CMS (I believe this)", and you can only guess as to the bugs in your hand-rolled CGI parser? Did you read any of the relevant RFCs before you wrote that code?