Robin said:
site, but saying that cgi.pm is less functional than insecure cgi parse
code isn't kosher, at least not by my standards.
What she actually said was that CGI.pm is slower, and as far as that goes
she's right. It's a heavy weight module. A more modular approach, with CGI,
HTML, and Cookie functions in separate modules, would have been better than
the AllPurposeWebThing.pm that CGI.pm has grown into - but that's an old
argument.
The problem is that she was looking at CGI.pm vs. hand-rolled code in
isolation, and that's simply not a realistic scenario. In any real-world
app, the time spent processing the main body of the code will *completely*
dwarf that spent parsing the form input.
Just do the math.
Let's say profiling (with Devel:

Prof) shows you that 1% of your overall
execution time is spent in CGI.pm, while 20% of it is spent in foo(). If
you can improve the efficiency of foo() by just 3%, to 19.4% of the overall
total, you've done more for the overall total than you would have by
cutting the cost of CGI.pm in half. If you can cut the cost of foo() in
half, you've done *far* more for the bottom line than *any* amount of work
on CGI.pm could possibly do.
In principle, we'd all be optimizing every last line of code to its peak
efficiency. Unfortunately, we just don't have time for that, so we have to
spend the time we do have where it will make the most difference.
At the same time she does have a lot of good stuff to say.
She's funny, I'll give her that.
sherm--