"Kulp, David" wrote:
> 
> On a related note, Apache::ASP doesn't actually check the request method.
> This can cause a nasty problem.
> 
> I wrote an ASP page that returned an excel table based on POST parameters.
> Internet Explorer will then send several different URL requests to the
> server including the same ASP URL but with the OPTIONS method and no
> parameters.  This caused my ASP to be executed again without parameters
> which triggered a big database query and serious load problems.  (Of course
> I should have a safety net for parameterless queries, but that's a different
> issue.)
> 
> My scripts now always have on start:
> 
>     if ($Request->{Method} !~ /GET|POST/) {
>         $Response->{Status} = 500;
>         $Response->End();
>     }
> 

Ross,

David is correct, Apache::ASP does no special handling of non-GET/POST
requests.  So you could put similar code to the above in your global.asa
Script_OnStart event to handle the PUT/DELETE as you see fit.  If
you think your code would be a valuable contribution to the project
it may be possible to integrate it into Apache::ASP directly.

--Josh
_________________________________________________________________
Joshua Chamas                           Chamas Enterprises Inc.
NodeWorks Founder                       Huntington Beach, CA  USA 
http://www.nodeworks.com                1-714-625-4051

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to