in reply to Re: Re: Procedure for finding/searching for existing code
in thread Procedure for finding/searching for existing code
Yes, I agree totally with Fastolfe. I've seen all to many perl scripts that have
been made by freebies that have nasty security holes in them. For example I one day
came across a script(newsdesk) that read from a flatfile database and outputed some
nicely formatted news list. This is all nice, but the script allow the user to read any
file on the system, and even running commands (by adding a | at the end). This kind of thing
would not be to hard to notice if you just know a bit perl. But I've seen some sites (to many)
actually using this script.
// Martin A