Hehe, fighting. There needs to be two sides to fight, all I'm asking for is clarification on the points he raised. If anything, I'm trying to promote healthier discussion here by asking for more than one-line "this is bad" or "this is what you should do" comments. One might see that as fighting, perhaps, but it's not the intention at all.

I still fail to see why the quoted code should be non-performant and insecure which is why I'm pushing for codefreek's own thoughts. It's not about right and wrong (there probably isn't such a clear distinction anyway) but just about making claims without putting them in context. Why do you think the code would be slowed down, what would you suggest instead? Why do you think the code is insecure, what would you suggest instead?