Re: A security problem

2002-11-01 Thread Geraint Jones
I can't say for sure, but check your Internet Explorer settings. You should be 
able to stop the browser caching documents from certain domains, and also you 
might have that automatic form completion option activated. I can't give you 
more precise info because I'm using Linux. And if that doesn't work, then I 
guess it's time to learn about session management, which is probably the best 
option if you want different users with different browsers to use your forms.
-- 
Geraint Jones

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: perl cgi security

2002-11-01 Thread zentara
On Thu, 31 Oct 2002 15:56:59 -0500, [EMAIL PROTECTED] (Todd W) wrote:

Jim Lundeen [EMAIL PROTECTED] wrote in message
news:3DBDA799.307DC69A;jimmyjames.net...
 nothing that will work on Linux box?

perlcc works... see below.

Yeah, I have to say that the perlcc which comes with perl5.8.0
is improved over the older versions, and will compile alot of
scripts which used to fail.  For simple scripts, with no modules,
I'm getting executables in the 60k size range, that's pretty good.
If I include CGI.pm, the size jumps to 1.7 meg ; but at least it still
compiles and runs. :-)

The general consensus used to be that perlcc was too finicky;
but 5.8.0's version is improved.


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




auto execute cgi

2002-11-01 Thread Admin-Stress
Hi,

Maybe this is not so related with perl it self, but still ...

Is there any way to 'auto execute cgi' ? I meant, I have to trigger something (like 
updating
database via perl) just after user viewed the html.

Thanks,

kapot

__
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: auto execute cgi

2002-11-01 Thread fliptop
On Fri, 1 Nov 2002 at 07:04, Admin-Stress opined:

A:Maybe this is not so related with perl it self, but still ...
A:
A:Is there any way to 'auto execute cgi' ? I meant, I have to trigger
A:something (like updating database via perl) just after user viewed the
A:html.

perhaps a server side include would do the trick?


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




two cookies from one domain

2002-11-01 Thread aman cgiperl
Hi
How do I set two cookies, from two different scripts, same domain?
I tried with different names for cookies as follows and I lose'em

Script1.cgi has the following code:

my $ct = rnd_num;# random
number generator
use CGI::Cookie;
my $cook = new
CGI::Cookie(-name='cok.cart', -value=$ct, -domain='.192.168.0.1');
print header(-cookie=$cook);

Script2.cgi has the following code:

my $name = get_mail_id;  # user's email
use CGI::Cookie;
my $cook = new
CGI::Cookie(-name='cok.email', -value=$email, -domain='.192.168.0.1');
print header(-cookie=$cook);


They probably conflict or something. Not sure.
Any ideas?

Thanks
Aman

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




mysql

2002-11-01 Thread Admin-Stress
Sorry, another out of topic.

Is it safe to use mySQL in cgi? I meant, if my update.pl perl cgi will do this :

   connect to mysql database
   insert into table values (values from FORM)
   ... other tasks ...
   close

What happen if there are, let say 100 people accessing that perl cgi? I meant maybe 
there will be
more than one connecting into database, is this ok?
Will the mysql database be corrupted? 

In old days, usually we have to LOCK database in multiuser environment :

   connect to mysql database
   lock database // so other user should WAIT before they can connect
   ...update/delete/insert/etc...
   unlock
   close

Thanks if you can enlighten me with current concept of mysql.

Regards,
kapot


__
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]