Open Source Zealots Dowplay Danger Of Perl Flaw On ZDNet Talkbacks

TalkBack 5 of 30:

Next »

« Previous

• Thread View
• Flat View

You are HALF-RIGHT - You are only HALF right - THIS IS NOT A PERL PROBLEM.

ANY code that uses user or form supplied data, must be prechecked for reasonableness. Example, I see $1000 per month shoppingcarts allow an email address to be entered, and saved in the phonenumber field.
It is programmers that forget 90% of the code they write has nothing to do with processing, but making sure the user doesn't screw up the system or the data. You MUST PRE-TEST ALL USER INPUT PEOPLE!

The tools we have are fantastic, but also make it easy for neophites to pawn themselves off as IT Professionals, which is a big fat lie. Because
of this, we have a TON of bad code out there.

You are wide open with PHP too, so be careful where you store data and what inside values you show in your code. Most .asp code also uses XML
and can wreak havoc with modified web forms and pages. I use ONLY my own Perl code, NO PHP, no XML, and very little javascript, and of course standard HTML with a sprinkling of SSI and Style Sheets thrown in for flavor.

THIS IS NOT A PERL PROBLEM.

It is an idiot with a computer problem.
Especially those that only THINK they are professionals because even dummer customers buy their stuff.

(IMHO)

Posted by: jrbeaman   Posted on: 11/30/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now