[gopher] Re: Gopher <-> NNTP?

[Marco d'Itri <md@xxxxxxxx>]

On Jan 08, John Goerzen <jgoerzen@xxxxxxxxxxxx> wrote:

 >gopher://gopher.quux.org:70/11/Archives/mirrors/boombox.micro.umn.edu/pub/gopher/Unix/gopher-gateways/gonnrp

This program blows dead goats wrt efficiency and is the most ugly perl
code I've ever seen in my whole life (look like the author did not grasp
some perl features, the s/// operator among them), but atfer my
treatment:

-rwxr-xr-x    1 md       users        7598 Jan  9 01:46 gonnrp.pl*
-rwxr-xr-x    1 md       users       19042 Jan  8 21:07 gonnrp.pl.old*

I have got a working (even if not efficient) gateway which even works
with -wT and "use strict".
I also fixed the most egregious bugs.

I'm not going to install it now because I think it needs a security
audit (the concept of input validation was obviously unknown to the
author), but I will mail it on request.

It also needs the perl interpreter inside the chroot jail, doesn't that
mean any remote use can execute it?

-- 
ciao,
Marco