On a related note, Apache::ASP doesn't actually check the request method.
This can cause a nasty problem.

I wrote an ASP page that returned an excel table based on POST parameters.
Internet Explorer will then send several different URL requests to the
server including the same ASP URL but with the OPTIONS method and no
parameters.  This caused my ASP to be executed again without parameters
which triggered a big database query and serious load problems.  (Of course
I should have a safety net for parameterless queries, but that's a different
issue.)

My scripts now always have on start:

    if ($Request->{Method} !~ /GET|POST/) {
        $Response->{Status} = 500;
        $Response->End();
    }

-d


-----Original Message-----
From: Ross Thomas [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 30, 2002 5:55 PM
To: [EMAIL PROTECTED]
Subject: Methods other than GET and POST


Does Apache::ASP directly support request methods other than GET and POST?
>From a quick grep of the module I'd say it doesn't, but it's worth asking.

I'm interested in using at least the PUT and DELETE methods in a project I'm
working on.

--
Regards,
Ross Thomas



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to