Beefy Boxes and Bandwidth Generously Provided by pair Networks
No such thing as a small change

Re (tilly) 1: Anything

by tilly (Archbishop)
on Jan 11, 2001 at 19:37 UTC ( #51128=note: print w/replies, xml ) Need Help??

in reply to Anything

I voted --, and wanted to explain why.

Given all of the fuss over handrolled CGI parsers lately, I am amazed that you would post your own. chromatic right now has an excellent explanation of why you really didn't want to do that. (And yes, you did make most of the common mistakes.)

Additionally you don't seem to be aware of a variety of race conditions, security holes, etc. For a random instance take a look at this and figure out how many of the attacks you could be taken down with. Oh, better than that, how many of the attacks are designed to get around checks that you don't even do?

Hopefully you will take this as constructive criticism and learn how to avoid these problems in the future. But in the meantime -- for bad advice that will put at risk anyone who follows it.

Replies are listed 'Best First'.
Re: Re (tilly) 1: Anything
by strredwolf (Chaplain) on Jan 11, 2001 at 23:06 UTC
    Thanks for the comments. I was looking for them, too!

    Yep, it's unfortunately handrolled, I'm a little bit spooked by's complexity. Sheesh, I just need to get varibles, not wrap the entire HTML generation process!!! (Update through the chatterbox: is split and autoloads what's needed. *sigh* Thanks, Fastolfe)

    It's also crude code, ment for an end-user; but securing it's probably worthy of some time.


Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://51128]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others pondering the Monastery: (4)
As of 2018-02-19 20:51 GMT
Find Nodes?
    Voting Booth?
    When it is dark outside I am happiest to see ...

    Results (266 votes). Check out past polls.