in reply to simple message board gone very wrong?

I haven't looked at the source of Matt's message board myself, but I recall that on comp.lang.perl.misc about a year ago, there was an extended thread familiy dealing with security holes in it.

Besides that, the phrases "no DB" and "their own HTML files" make me wonder about unnecessary complexity and scalability. Just about any recent version of Perl has dbfile support in various flavors, and it's easy to use. See tie, dbmopen and dbmclose.

You might take a look at Matt's message board for a general idea of structure, but I suspect that you'll have a better time writing your own from scratch than trying to fix design flaws and security holes and manage threading with his version.

Or you could search on Freshmeat for any of a dozen variants on the theme.

  • Comment on Re: simple message board gone very wrong?

Replies are listed 'Best First'.
Re: Re: simple message board gone very wrong?
by skeay (Initiate) on Dec 12, 2000 at 05:03 UTC
    $out_of_context_rambling = qq|

    Without wishing to unneccecarily trash anyone, Matt's stuff is rediculously popular, considering the quality of his products. I run servers containing many thousands of websites, and over the years I have been constantly amazed at the problems caused by his code. Thinking about it now, I wonder why I didn't submit a whole bunch of patches to him in the first place - maybe that would have helped things.

    This seems to echo somthing that's true accross all western society -- the masses just accept whatever is rammed down their throat. Matt put a lot of effort into FAQs, nice packaging, a pretty website, and decent search engine submission. And he did all this at a time when there was little else available. I hope he's now worth a lot of money and drives a nice car.

    Websites were still very much the domain of HTML monkeys who needed that extra little active add-on. They can't read the code, so they have no way to judge the quality of it. Why do people eat McDonalds or buy lousy stereos?

    So, the question for me is this: How do we encourage the popularity of high quality software in a market where the buyer is simply not empowered to make the "right" descision? They are certainly not reading perlmonks...

    |;

      If you can't make a street musician move from in front of your shop it sometimes makes sense to tune his guitar. ;-)

      Claude

Re:(jptxs) simple message board gone very wrong?
by jptxs (Curate) on Dec 11, 2000 at 23:58 UTC

    Well, I wanted to avoid any sort of DB b/c this needs to run on a hosted box for somone and they requested it be as self contained as possible. Also, they requested the ability to be able to zip up the whole thing and move it whenever they wanted. I figure if it's just one .cgi and a bunch of .html files it couldn't be all that hard, right?

    Doing the Freshmeat thing as we speak. I was planning on just writing it all from scratch for the fun of it, but after sketching out the idea I thought it was so easy that I decided to see what MSA did so horribly wrong - that had come up in here before. I just got spooked when I saw how similar what he was doing was to what I had thought up myself...

    "A man's maturity -- consists in having found again the seriousness on +e had as a child, at play." --Nietzsch +e
      I think he suggested using DBM files, which are supported (to my knowledge) across most any Unix system. It does not utilize a true database, merely a set of lower-level calls that interact with standard file formats. This would let you use database type functionality in a portable way that won't involve you installing a bunch of extra cruft.