Re: session module

[Perrin Harkins]

On Fri, Oct 29, 2010 at 4:23 PM, Lon Koenig l...@schnoggo.com wrote:
 Are these susceptible to the cleartext cookie silliness exposed by FireSheep?

Well, Apache::Session doesn't handle cookies at all, so it's entirely
up to you how you want to deal with it, and CGI::Session doesn't
dictate whether or not your site uses SSL, so that is also up to you.

There is no way to prevent people from potentially seeing cookies (or
anything else) passed over a non-SSL network.  Sites that are
seriously concerned about this should use SSL.  Even sites that don't
use SSL should use cookies with some form of MAC and a reasonable
session timeout.

- Perrin

Re: session module

[Fayland Lam]

try a framework. that's much more popular. :)

On Fri, Oct 29, 2010 at 8:20 PM, Perrin Harkins per...@elem.com wrote:
 Both work.  CGI::Session was better maintained for a while but it
 looks like Apache::Session has been updated recently.  Pick the one
 that you find easiest to understand from the documentation.

 - Perrin

 2010/10/29 Jeff Pang jeff_p...@sina.com:
 is Apache::Session or CGI::Session better for mod_perl?

 Thanks.





-- 
Fayland Lam // http://www.fayland.org/

Re: session module

[Jeff Pang]

于 2010-10-29 20:28, Fayland Lam 写道:

try a framework. that's much more popular. :)



I wrote a small application with few scripts.
A framework like catalyst is too large to use for me.
Thanks.

Jeff.

Re: session module

[Jeff Pang]

于 2010-10-29 20:20, Perrin Harkins 写道:

Both work.  CGI::Session was better maintained for a while but it
looks like Apache::Session has been updated recently.  Pick the one
that you find easiest to understand from the documentation.



I know CGI::Session well.
But have been thinking does Apache::Session get better performance under 
modperl?


Thanks.

Jeff.

Re: session module

[Fayland Lam]

try Dancer. which is very suitable for small application. just one file.

Thanks

On Fri, Oct 29, 2010 at 8:37 PM, Jeff Pang jeff_p...@sina.com wrote:
 于 2010-10-29 20:28, Fayland Lam 写道:

 try a framework. that's much more popular. :)


 I wrote a small application with few scripts.
 A framework like catalyst is too large to use for me.
 Thanks.

 Jeff.





-- 
Fayland Lam // http://www.fayland.org/

Re: session module

[Perrin Harkins]

On Fri, Oct 29, 2010 at 8:39 AM, Jeff Pang jeff_p...@sina.com wrote:
 I know CGI::Session well.
 But have been thinking does Apache::Session get better performance under
 modperl?

I haven't measured it, but I doubt there's any significant performance
difference.  Don't be fooled by the CGI in CGI::Session.

- Perrin

Re: session module

[Jeff Pang]

于 2010-10-29 20:42, Fayland Lam 写道:

try Dancer. which is very suitable for small application. just one file.



Ok I will check out it.
I first time knew Dancer from ruby 2 years ago.
Never know that there is a perl execution of that.

Re: session module

[Phil Carmody]

--- On Fri, 10/29/10, Fayland Lam fayl...@gmail.com wrote:
 try Dancer. which is very suitable
 for small application. just one file.

One file containing:

use Dancer::Config;
use Dancer::FileUtils;
use Dancer::GetOpt;
use Dancer::Error;
use Dancer::Helpers;
use Dancer::Logger;
use Dancer::Plugin;
use Dancer::Renderer;
use Dancer::Response;
use Dancer::Route;
use Dancer::Serializer::JSON;
use Dancer::Serializer::YAML;
use Dancer::Serializer::XML;
use Dancer::Serializer::Dumper;
use Dancer::Session;
use Dancer::SharedData;
use Dancer::Handler;
use Dancer::ModuleLoader;

which isn't one file by my reckoning. Nevertheless, it looks very 
interesting. I will try a toy applet with it this weekend. Thanks for 
mentioning it.

Phil

 On Fri, Oct 29, 2010 at 8:37 PM, Jeff Pang jeff_p...@sina.com
 wrote:
  于 2010-10-29 20:28, Fayland Lam 写道:
 
  try a framework. that's much more popular. :)
 
 
  I wrote a small application with few scripts.
  A framework like catalyst is too large to use for me.

Re: session module

[Lon Koenig]

Haven't used any of the popular session modules in awhile.
Are these susceptible to the cleartext cookie silliness exposed by
FireSheep?

Great Artists Ship
Lon Koenig l...@schnoggo.com  http://lonk.me http://lonkoenig.com



On Fri, Oct 29, 2010 at 7:47 AM, Jeff Pang jeff_p...@sina.com wrote:

 于 2010-10-29 20:42, Fayland Lam 写道:

  try Dancer. which is very suitable for small application. just one file.


 Ok I will check out it.
 I first time knew Dancer from ruby 2 years ago.
 Never know that there is a perl execution of that.

session module

[Jeff Pang]

is Apache::Session or CGI::Session better for mod_perl?

Thanks.