Beefy Boxes and Bandwidth Generously Provided by pair Networks
We don't bite newbies here... much
 
PerlMonks  

Re: Re: Dynamic Variable Names?

by Anonymous Monk
on Jul 23, 2002 at 23:41 UTC ( [id://184648]=note: print w/replies, xml ) Need Help??


in reply to Re: Dynamic Variable Names?
in thread Dynamic Variable Names?

... but security is only an argument if you use data from the untrusted environment as variable names.

Really?

Whenever code does not behave as expected, there is a real possibility of an unexpected consequence that compromises security. Therefore any programming practice that leads to bugs is also a source of potential security flaws, even if it is not obvious how to get there.

Replies are listed 'Best First'.
Re: Dynamic Variable Names?
by Abigail-II (Bishop) on Jul 24, 2002 at 08:37 UTC
    The only coding practice that doesn't lead to bugs is to not code at all. eval()s are as dangerous as code written with vi - you can make the same mistakes.

    Abigail

      You can make the same mistakes with any coding practice - agreed. Which leads to the question of how often you make them, and how quickly you catch them.

      I submit that liberal usage of eval for most people leads to more mistakes, and more difficulty in tracking them down and debugging them. (Particularly if you don't religiously check $@.) Given its power it is sometimes worth going there. But not when there are built-in constructs for doing the same thing you are trying to do.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://184648]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others scrutinizing the Monastery: (1)
As of 2024-04-25 04:27 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found