Re: Using -T (taint) in perl scripts on Win32

2002-03-01 Thread Ted Markowitz
Yup it prints valid HTML. Here's an example running it from the command-line: 06:38pm ../ch06> perl -wT current_time.cgi Content-type: text/html Current Time Current Time Welcome. The current time is Fri Mar 1 18:38:18 2002. 06:38pm ../ch06> and here's the source (verbatim) for i

Re: Using -T (taint) in perl scripts on Win32

2002-03-01 Thread W P
Blank>> produces valid HTML with no errors. so you're saying it is printing a valid header? like this: Content-type: text/html HTML STUFF HERE -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Using -T (taint) in perl scripts on Win32

2002-03-01 Thread Ted Markowitz
Brent, Unfortunately, it's not much more informative then I said in my first note. Here's a representative error message: [28/Feb/2002:14:46:37] failure ( 1892): for host 127.0.0.1 trying to GET /cgi2/current_time.cgi, cgi-parse-output reports: the CGI program c:\Perl\bin\perl.exe did not p

Re: Using -T (taint) in perl scripts on Win32

2002-03-01 Thread Brent Michalski
What does the web server log file say that the problem is. The web server log should contain something much more useful than a 500 error... I am guessing that you are getting an "insecure dependency" or some type of error like that when you run it via the web server brent

Re: CGI Connection and Test Select

2002-03-01 Thread fliptop
Brice, Charles wrote: > my $dbh = DBI->connect("dbi:Oracle:aux","ceb","ceb"); > > my $cursor = $dbh->prepare("select * from tab") || die "PREPARE > error $DBI::errstr\n"; what error is it putting in your error log? you could try setting DBI's trace le

Re: Very serious security hole in your script

2002-03-01 Thread Curtis Poe
--- erotomek <[EMAIL PROTECTED]> wrote: > --- Curtis Poe <[EMAIL PROTECTED]> wrote: > > > > You supplied some great information, however, your > > example of plugging the security hole has a > > security hole itself. From the command line on any > > *nix system, enter the following (assuming you

Using -T (taint) in perl scripts on Win32

2002-03-01 Thread Ted Markowitz
I'm having difficulty using the -T switch with perl in the #! line in cgi scripts on my Win2K system using a Netscape 4.1 web server. If I use something like "#!c:/perl/bin/perl.exe -wT" on the 1st line, the server complains with an HTTP 500 error about the script not producing valid headers

CGI Connection and Test Select

2002-03-01 Thread Brice, Charles
Hi All Please Help! ** I am new to CGI and Perl. I am trying to test a connect to the database and execute a select against the TAB table. The connect is hard coded for now. I am able to pass the values in but I have not tried to us

Re: Text input fields with preassigned text??

2002-03-01 Thread Stephan Tinnemeyer
Bhanu, 'value' is an attribute of text input fields, e. g.: I suppose your script cannot edit the content of value as long as there is no value attribute defined at all. To leave it empty you may code 'value=""'. But maybe your script just expects you to define *which* value attribute (i. e. o

Re: Text input fields with preassigned text??

2002-03-01 Thread Brent Michalski
So you are trying something like: or This is the defaut text... Brent Rob Roudebush

Text input fields with preassigned text??

2002-03-01 Thread Rob Roudebush
Is there anyway to display text input fields with text already inside, that can be modified and submitted? Bhanu Prakash <[EMAIL PROTECTED]> wrote: Perl Listers, I'm unable to retrieve cookies once I set them! I can see my html headers on my page once they are set, along with the page, but w

Re: Very serious security hole in your script

2002-03-01 Thread Carl Franks
> http:[EMAIL PROTECTED]/msg02976.html Doh! Please forgive my nonsensical ramblings. Thanks! Carl -- >From: erotomek <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: Very serious security hole in your script >Date: Fri, Mar 1, 2002, 4:55 am > > > --- Carl Franks <[EMAIL PROTECT