Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-29 Thread Liam R E Quin
On Fri, 2013-06-28 at 10:20 +0200, Christian Grün wrote: > [...] If you want to avoid that the BaseX server is > visible and can be controlled from outside, you can e.g. restrict the > SERVERHOST option to localhost [1,2]. I do that on fromoldbooks.org, but when I upgraded basex it of course start

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-29 Thread Christian Grün
> As someone coming at this from the other direction - I would like to allow > dynamic execution of anything (given the appropriate passwords, of course). > I am trying to implement something similar to eXide [1] to run on an > Android phone. …exciting! > I was surprised, but not too concerned,

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-28 Thread Andy Bunce
That code got a little garbled. I meant: client:connect('localhost', 1984, $user, $password) ! client:query(.,$src) See http://docs.basex.org/wiki/Client_Module#client:query On Fri, Jun 28, 2013 at 11:52 AM, Andy Bunce wrote: > As someone coming at this from the other direction - I would like

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-28 Thread Andy Bunce
As someone coming at this from the other direction - I would like to allow dynamic execution of anything (given the appropriate passwords, of course). I am trying to implement something similar to eXide [1] to run on an Android phone. I am using client:connect('localhost', 1984, 'admin', 'admin'

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-28 Thread Christian Grün
> Can you provide more information on how this is implemented on the > BaseX site? > > […] I was worried about the rest:query interface: I can > make my PHP proxy do all the checking I would have done with > cqi:nanny-says-ok(), but I can't prevent an adversary from sending an > HTTP request direct

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-26 Thread C. M. Sperberg-McQueen
On Jun 24, 2013, at 10:02 PM, Christian Grün wrote: >> I'm contemplating the construction of an interface for advanced or >> dedicated users of a database, with a text box in which they type >> their queries as XQuery modules. (Non-advanced and non-dedicated >> users will make do with a variety

Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-24 Thread Christian Grün
> I'm contemplating the construction of an interface for advanced or > dedicated users of a database, with a text box in which they type > their queries as XQuery modules. (Non-advanced and non-dedicated > users will make do with a variety of pre-defined queries; this interface > is intended to pr

[basex-talk] limiting time or space resources in calls to xquery:eval() ?

2013-06-24 Thread C. M. Sperberg-McQueen
I'm contemplating the construction of an interface for advanced or dedicated users of a database, with a text box in which they type their queries as XQuery modules. (Non-advanced and non-dedicated users will make do with a variety of pre-defined queries; this interface is intended to provide an o