in reply to RE: Yet Another Cargo Cult non-use of CGI.pm
in thread Upload Security (strip ../, etc.)
In this case, merlyn is right; you SHOULD use CGI.pm. It won't break, most likely, if you upgrade to a newer version of CGI.pm later, although that is possible. And it is more secure than hand-rolling, for many reasons, including that CGI.pm doesn't make typo's, while humans do.
Finally and most importantly, you and your team members are the ONLY people who can decide what is and is not appropriate to your situation. merlyn is no more a god than any of us here. He has good advice, usually; that doesn't mean you must always do as he demands.
|
|---|