From owner-freebsd-questions@FreeBSD.ORG Thu Jul 20 03:21:10 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4F4E016A4DD for ; Thu, 20 Jul 2006 03:21:10 +0000 (UTC) (envelope-from stapleton.41@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.172]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7636B43D5D for ; Thu, 20 Jul 2006 03:21:09 +0000 (GMT) (envelope-from stapleton.41@gmail.com) Received: by ug-out-1314.google.com with SMTP id m2so641485uge for ; Wed, 19 Jul 2006 20:21:08 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=tbi2FECRy6G9HGxQa+A1atZ0C1JPARDO/8S6mA8FIoJIiShodWsKZ4PiAG/LeO0xmQ5tQzX3zOGtCGEG2g1lTUSAy6byBPjxh7PhoTdZlMARZoHshI5RSAe04XKXqZME0/WdsRBedKKiIo0uce61BvHPmYRSTmCacdhaohMIeB0= Received: by 10.66.221.19 with SMTP id t19mr1427350ugg; Wed, 19 Jul 2006 20:19:32 -0700 (PDT) Received: by 10.67.86.11 with HTTP; Wed, 19 Jul 2006 20:19:31 -0700 (PDT) Message-ID: <80f4f2b20607192019h6ae61c63h3e0fc4fe64a38e8d@mail.gmail.com> Date: Wed, 19 Jul 2006 23:19:32 -0400 From: "Jim Stapleton" To: freebsd-questions@freebsd.org In-Reply-To: <000d01c6ab99$3ee24500$6601a8c0@bnetmd.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <000d01c6ab99$3ee24500$6601a8c0@bnetmd.net> Subject: Re: coldfusion alternative X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2006 03:21:10 -0000 On 7/19/06, Glenn McCalley wrote: > OK so a good customer of long standing wants a coldfusion website. > Some "developer", the husband of one of his staff (so that makes him a > trusted advisor, right?), has convinced him "it's the only way to do it". > My position is maybe that's the only way -he- can do it but there's a whole > wide world of alternatives out there. > > Looking at it, he wants to collect some data on an input form, then hash it > over a couple of ways and present the results. Pretty graphics maybe as > well. Looks to me like Perl... don't even need a real database, heck > DB_File would work just fine for this. > OK with me... > ...but what's the argument to present other than "you don't need > coldfusion"? > > I'd even put CF on the system and be done with it if there was a FreeBSD > version (anyone have any luck with that?). Tracked down BlueDragon but > that's apparently Win only as well. > > Ammunition wanted. > Thanks > Glenn. > > > > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > I wish I had something more solid than this, but this is the best I have at the moment. I would never suggest cold fusion for one primary reason: Every bit of documentation I've seen suggests that "fieldname_required" hidden fields are a good idea for data verification, and they don't mention _anything_ else, or even suggest the risk with this. Well, the problem is, a hacker won't sent those tags, and if the data is critical, then not putting backups could be dangerous. This isn't necessarily an issue, any two-bit dev should be able to figure this one out. However useing that as well as a backup check is redundant and wasteful. Effectively you are wasting time or giving a hacker a hackme howto. Any language that promotes either of those is a language I would never trust - who knows what they've done inside of it, away from prying eyes. -Jim Stapleton