Beefy Boxes and Bandwidth Generously Provided by pair Networks
Just another Perl shrine

Re: rBuild hack

by merlyn (Sage)
on Feb 26, 2001 at 20:47 UTC ( #60886=note: print w/replies, xml ) Need Help??

in reply to rBuild hack

I'm not yet commenting on the security aspects here, but I do think your program would be substantially shorter if you simply used both CGI (for safely decoding the incoming parameters) and CPAN (to manage the fetch, unpack, and build), both of which are included in all modern Perl distributions.

Thanks for the idea though. I'll probably do one myself using those modules and put it in a column, and credit you for inspiration. It's been added to my to-do list.

-- Randal L. Schwartz, Perl hacker

Replies are listed 'Best First'.
Re: Re: rBuild hack
by Intrepid (Deacon) on Feb 27, 2001 at 01:32 UTC

    I am honored, Merlyn. As to the matter of, I wasn't actually surprised you mentioned that .. I kind of anticipated that you might bring that up. Your point about's protection with incoming parameters is a good one.

    I'll admit that while I was writing this application it never occurred to me to use, and that alone shows how much I am fundamentally on a different page from a lot of senior perl hackers (when it comes to writing CGI applications). I think that state of affairs is a consequence of the happenstance that I learned HTML first, and Perl later, and learned HTML rather well (so that all the HTML I do tends to be done in a plain text editor, for instance). It's a matter of what approach and tools fit one's self most naturally. To me learning the methods feels like redundant effort -- to make a line break or a blockquote I have to use some syntax rather than what I can do without thought in HTML -- and that's clumsy enough to slow me down and frustrate me. But you've probably heard others before me say similar things.


      Using to generate HTML has little benefit. Using to process CGI parameters, especially forms, is nearly a must if you want good portability and security.

              - tye (but my friends call me "Tye")
        Using CGI to generate HTML has little benefit? You are never missing an end tag or improperly nesting. Your Perl code is exceptionally clean and easy to follow. Oh, and it's quicker to type up and less likely to have typo interference. Feel free to do things the hard way, but I count these as benefits. :)

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://60886]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others exploiting the Monastery: (6)
As of 2018-06-19 14:54 GMT
Find Nodes?
    Voting Booth?
    Should cpanminus be part of the standard Perl release?

    Results (114 votes). Check out past polls.