cgi security

[Michael Ströder]

Sheila King wrote:
> 
> Less system overhead? That is exactly the opposite
> information from what I got,
> [..]
> And I'd have to say that my experimenting confirms this.

Hmm, might be indeed less latency to call the sendmail executable
than doing the whole SMTP connection. Personally I'm a little bit
scared about forking shells in a CGI-BIN (system overhead). And I
don't like to install a MTA on all web servers.

> And, in the case that someone uses the smtplib option in my script, rather
> than the sendmail option, my script has to go to a lot more trouble to set the
> envelope sender and recipient, the date field, the message-ID and so forth
> myself.

Not really. In my case the MTA does all stuff itself. Setting From:
and Subject: lines was sufficient.

> Are you suggesting just using the smtplib and tossing the sendmail part of the
> script?

Your mileage may vary.

Ciao, Michael.