in reply to Secure CGI

We've discussed a Code Review section before, and I'm all for that.

Performing a commercial audit may strike some monks a little oddly, however. Would you and your client be willing to donate an hour's worth of your fees to the monastery for this purpose?

I don't have a problem with it either way, but it might make other people sleep a little more soundly at night. (Think of it as really cheap training for you and insurance for them.)