At 14:59 9-10-2002, you wrote:

>On Wed, 09 Oct 2002 14:30:38 +0200, Melvyn Sopacua wrote:
>
> >
> > The 'View ISAPI log' option in the System administration, is a means to
> > get the raw log, remotely. Escaping these will not be a good thing.
>
>    I think it really necessary to replace "<" by "&lt;" and ">" by "&gt;"
>while sending the raw log to the browser; otherwise nobody can see what is
>actually in the log (when it is a full log), otherwise the browser will
>interpret HTML-tags in the log as HTML-tags and act upon them, instead of
>showing them as they are in the log file.

There's nothing stopping you from saving it to file and opening it in notepad.

However - if you escape the output, there is no way to be sure that the output
you get can be reconstructed.

This option is meant for system admins. These logs are stored in sambar/log 
and
there are many protections in Sambar to allow as little direct access to
directories under the installation root as possible.

It is a good thing(tm) to get as pure log data as possible.
It is a good thing(tm) to be able to access logs remotely, securely.
Allowing FTP access to sambar/log is a defenitely NOT good.

> > Do not debug your php applications with the ISAPI log.
>
>   I don't. It was just a coincidence that I was also testing a PHP search
>script, which I friend did recommend, and which was getting beyond the time
>limit of 30 seconds. But thank you for reminding me that PHP is an ISAPI
>application, too (at least I have it installed that way) and that I should 
>set
>the ISAPI log to none when I want to benchmark that PHP search script.

Yes - ISAPI log tracing to full, is very resource intensive. Every interaction
between the ISAPI app and Sambar is logged.
This does have impact on the execution time of your script.

(By the way: execution_time = CPU time != actual time. max execution time of 30
seconds, can effectively run for an hour, if you pass execution off via the
system()/exec() or backtick).

> > ISAPI log tracing is used when you are developing the php4isapi.dll (or 
> any
> > isapi app for that matter).
>
>   I actually do look into the ISAPI.LOG for problems with other ISAPI
>applications, which I want to build using VDP and/or Dataweb Builder (see
>http://www.dataweb.de).

You then may consider installing the GNU textutils for NT (I'm sure Alex Broens
knows where they are) and `tail' the logfile. Debugging builds via the browser
doesn't sound like something interesting to take up as a hobby :-).

With kind regards,

Melvyn Sopacua
<?php include("not_reflecting_employers_views.txt"); ?>
-------------------------------------------------------
To unsubscribe please go to http://www.sambar.ch/list/

Reply via email to