Re: [python-win32] IIS CGI installation
On Sat, 4 Jun 2005 11:27:28 -0700, Robert Brewer [EMAIL PROTECTED] wrote It's probably considered insecure because you are passing params (%s) to python on the command line. Those clever hackers could find a way to pass Nasty Things, like del C: Performance will be intolerable, since each page request has to start and stop the Python interpreter, which is not a quick process. This is a dangerous exaggeration. There are a huge number of web sites for which a Python CGI implementation is quite workable. If you're creating a web site that will get 5 hits a minute, no one will either care or notice the extra half second from loading Python. The vast majority of the web sites in the world fall into that category. Now, if you're getting 100 hits a minute, then you need to look at another approach. But don't waste time optimizing unnecessarily. First, see if you have a problem. Then attack it. The ease of developing and debugging using CGI should not be underestimated. If you used the latter, you could use CherryPy and be on the cutting edge of Python web development. :) Here, I am in complete agreement. There's something very appealing about CherryPy. Simple, functional, understandable. -- Tim Roberts, [EMAIL PROTECTED] Providenza Boekelheide, Inc. ___ Python-win32 mailing list Python-win32@python.org http://mail.python.org/mailman/listinfo/python-win32
Re: [python-win32] IIS CGI installation
There are other ways of using Python with IIS, such as: Also note that recent pywin32 builds ship with Python support for ISAPI filters and extensions. The support is quite low-level (ie, no significant attempt to abstract the ISAPI interface) which is either good or bad, depending on your point-of-view :) There is a sample proxy-server in the distribution. For many cases, a higher-level framework is more suitable - but for raw performance under IIS in Python, I suspect this is the best you will find (depending on *your* code too of course - as mentioned, this is fairly low-level) Mark. attachment: winmail.dat___ Python-win32 mailing list Python-win32@python.org http://mail.python.org/mailman/listinfo/python-win32
Re: [python-win32] IIS CGI installation
Dan Fulbright wrote: I have found a lot of links to http://www.e-coli.net/pyiis_server.html, however, this page starts out with: This is really very easy. It is also not a good idea for both security and performance reasons. What are the security and performance issues, and how can they be overcome? I am wanting to use Python for CGI on a shared Windows 2000 Server with IIS, so security and performance are of utmost importance. It's probably considered insecure because you are passing params (%s) to python on the command line. Those clever hackers could find a way to pass Nasty Things, like del C: Performance will be intolerable, since each page request has to start and stop the Python interpreter, which is not a quick process. There are other ways of using Python with IIS, such as ISAPI + WSGI: http://isapi-wsgi.python-hosting.com/ or ASP: http://www.4guysfromrolla.com/webtech/082201-1.shtml or (my preferred method) ASP + WSGI: http://www.amorhq.net/blogs/index.php/fumanchu/2005/05/26/wsgi_gateway_f or_asp_microsoft_iis If you used the latter, you could use CherryPy and be on the cutting edge of Python web development. :) Robert Brewer System Architect Amor Ministries [EMAIL PROTECTED] ___ Python-win32 mailing list Python-win32@python.org http://mail.python.org/mailman/listinfo/python-win32
