It seems that the Hiawatha webserver is not vulnerable for this exploit, because it doesn't URL decode environment variables. Wise decision (CGI's seem to work fine without it) or just luck? Is there a standard which says that CGI environment variables should be URL decoded?

Oh, wait. Elliptic curve cryptography, never mind my previous post.

... consists of 64 hex characters. This gives a 256 bit public key. Not very strong or am I missing something?

Choosing a programming language that best suites the needs of your company it totally different from pointless bashing a programming language you don't even use. In that case, those opinions are irrelevant to everybody.

That's good for you, but it's still an opinion. I don't think that PHP works against the programmer. Talking about Django, I don't like it. I've takens a look at it, but I think it's too much hustle to get a simple website running. I've created my own framework, the Banshee PHP framework. It's fast, secure and easy to use. The websites you can make with Banshee are just as good as the one you can make with Django.

You're missing my point. I'm only saying: if you don't like it, don't use it. But don't bug other people with oppinion, because it's irrelevant to the .

It's not a bad knife. It's just that *you* think that it's a bad knife. I think it's a fine knife. I'm not saying perfect, but no knife is. I know its good sides, I know its bad sides, which allows me to handle it well. The things I create with it are really up any challenge.

But tell me, how's your cooking?

Thank you for proving my point.

If you don't like PHP, that's fine. But please, stop wasting other people's time with your whining about it. Really, nobody cares!

it's the cook that prepares the food. It's not the camera, it's the photographer that shoots the picture. It's not the racing car, it's the driver that wins the race. It's not the programming language, it's the programmer that creates the application.

All you whiners can bash PHP like you want. But a PHP website will still beat your Perl website if the PHP programmer is better than you. So, unless your coding skills are 100% perfect, you better start looking at your own flaws instead of wasting time at whining about a programming language that simply isn't your pick of choice. Please, it's time to grow up.

prick

It already has been doing that for the last decades.

I'm not say that *only* the US president should be doing something. EVERY world leader should be doing something. If you think that this is only a local incident, you don't understand the situation there and what just has happend.

Seriously, is that really what matters now? What an arrogant *****. What really matters is who did it and why. What's the risk for other planes. If it were the rebels, how did they get their hands on such advanced weaponry. 298 people died. Who they were is something to find out by the airliner company. A president, and specially one from the USA, should really have other things to worry about.

Don't focus on a language only. Also look at a good framework. My advice is the Banshee PHP framework. It mainly focuses on security, which is the only important thing these days. I know this will be seen as spam, but do yourself a favor and just take a look at it for 15 minutes.

Whatever it is now, it should be dead. For the simple reason that Perl allows this kind of code:

$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map{$_%16or$t^=$c^=( $m=(11,10,116,100,11,122,20,100)[$_/16%8])$t^=(72,@z=(64,72,$a^=12*($_%16 -2?0:$m&17)),$b^=$_%64?12:0,@z)[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$h =5;$_=unxb24,join"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$ d=unxV,xb25,$_;$e=256|(ord$b[4])