Mailing-List: contact modperl-help@perl.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: local policy)
Cc: mod_perl list <modperl@perl.apache.org>
Message-Id: <F0215BCF-7C03-4CC0-9AF2-0D2EF7946818@2xlp.com>
From: Jonathan Vanasco <jvanasco@2xlp.com>
To: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
In-Reply-To: <4995DA40.5050402@ice-sa.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Apple Message framework v930.3)
Subject: Re: dealing with empty field names in query
Date: Fri, 13 Feb 2009 16:03:26 -0500
References: <555657.82066.qm@web25407.mail.ukl.yahoo.com>
 <EE9141C1-7ACD-4553-8D51-702938933AB0@2xlp.com> <4995DA40.5050402@ice-sa.com>

On Feb 13, 2009, at 3:38 PM, Andr=E9 Warnier wrote:

> The management part of me says that if you sell shoddy merchandise to
> people, they are going to come back and hit you with it.
> Presumably, if you get such kind of posted data from a form, it is
> because you sent a shoddy form to the browser, which can submit such
> shoddy data.  Or because you have some shoddy javascript in the form,
> which sends shoddy data to your server.
> So we're still at the garbage level, but the other way around : =20
> garbage
> out, gargabe in.
> ;-)

That's assuming that you're responsible.

Today many people use misc javascript libraries; and there are js DMZ =20=

servers that serve off cached versions so people don't have to =20
reload.  A simple typo could render your application broken.=