CGI Tutorial

Clodoaldo Pinto Neto clodoaldo.pinto at gmail.com
Wed Oct 4 16:52:52 EDT 2006


2006/10/4, Tim Chase <python.list at tim.thechases.com>:
> >> I'm just building a Python CGI Tutorial and would appreciate any
> >> feedback from the many experts in this list.
> >
> > http://webpython.codepoint.net
>
>
> Thanks! :)
>
> My first note would be regarding
>
> http://webpython.codepoint.net/shell_commands
>
> The code is very dangerous...allowing any ol' schmoe to run
> arbitrary code on your server.  At the barest of minimums, I'd
> plaster the code with warnings that this is a Very Dangerous
> Thing(tm) to do.

I though the danger was so obvious that i didn't bother. Now i have
issued a warning.

> Similarly, regarding
>
> http://webpython.codepoint.net/debugging
>
> you might want to caution that this will/can display potentially
> sensitive information (passwords, internal file-structure, etc),
> and thus should only be used while debugging, and turned off in
> any sort of production code.

Yes, another warning was issued.

Thanks for your help. Clodoaldo Pinto Neto



More information about the Python-list mailing list