[thelist] Re: Which way is best? (was: Homemade Shopping Cart)

Kevin Martin evolt at brasscannon.net
Wed Nov 26 09:14:37 CST 2003


Quoth John C Bullas <jcbullas at nildram.co.uk>
> >
> >Unless you're in the habit of using variables names such as
> >"$I_HATE_MY_BOSS" I can't imagine how sensitive information
> >appears in your code...?  Perhaps I misunderstand.
> 
> Think about what the shop might be selling :)
> 
> http://www.statesecretsonline.com.tw ?????

That's still about the stock on his shelves, not about
his code.

Here -- find the weapons of mass destruction:

CREATE TABLE wmd (weapon(varchar(32)),
 latitude(float(6,4)), longitude(float(6,4)));

Not going to happen without access to the database thus
defined, see?

Obscuring your code is not only contrary to what Evolt
(and Perl, PHP, Apache, and the Web itself) is about;
it's fundamentally stupid.

The code I create by myself is not going to be competitive
with code that has been hammered on by two dozen sharp-eyed
Evolters.  It won't be as fast, it won't be as secure, it
won't be cross-platform compatible nor will it have many
of the features I want it to have.

Tapping into this community is the greatest competitive
advantage I can imagine -- but the community can't help
me if I won't show it my code.

Save your security concerns for your passwords and crypto
keys, not your code.


More information about the thelist mailing list