You may want to apply a better scaling factor to some of these categories. At this point, it seems to me that a script which:

• uses strict
• uses -T and correctly performs taint checking
• uses CGI.pm to handle CGI form input

can score worse than a script which does none of these, but which:

• uses CGI.pm for HTML output
• uses here-docs instead of multiple print statements
• has "good" style and "effective" commenting (by some subjective standard)

Let's keep our priorities clear. Style may count for something, but I think that security and correctness should count for much more.

Update: The security issues appear to be addressed somewhat in the previous node (which beat me by bare seconds), but I think I still have a point here somewhere...

Update2: By the way, do you need and/or want help reviewing the scripts?

buckaduck