RE: Can't INSERT INTO for one column

2004-06-15 Thread Bob Showalter
Chris Charley wrote: > Hi > > The error messages I'm getting from the attempted insert are: > > > C:\perlp>perl t.pl > DBD::SQLite::db do failed: no such column: cash at t.pl line 17, > line 1. > DBD::SQLite::db do failed: no such column: cash at t.pl line 17, > line 2. > DBD::SQLite::db do fa

Can't INSERT INTO for one column

2004-06-15 Thread Chris Charley
Hi The error messages I'm getting from the attempted insert are: C:\perlp>perl t.pl DBD::SQLite::db do failed: no such column: cash at t.pl line 17, line 1. DBD::SQLite::db do failed: no such column: cash at t.pl line 17, line 2. DBD::SQLite::db do failed: no such column: credit at t.pl line 1

Re: Writable dirs

2004-06-15 Thread Wiggins d Anconia
> Hi, > > a friend of mine uses a certain directory to upload files to. This directory has write permissions for all, since his cgi script has to store the files in it. > This is a common myth. The directory only has to have the permissions it needs, how much control you have over the directory a

Writable dirs

2004-06-15 Thread Jan Eden
Hi, a friend of mine uses a certain directory to upload files to. This directory has write permissions for all, since his cgi script has to store the files in it. He does not believe that this could be a security issue. Is there a simple method to delete something from this directory (or write

Re: Posting hyperlink value

2004-06-15 Thread David Dorward
On 15 Jun 2004, at 14:24, David Dorward wrote: Bad form, following up by own post et al. However: $hostname = escapeHTML($hostname); Should be: $hostname = escapeHTML(escape($hostname)); as the data needs to be url encoded as well as html encoded. -- David Dorward

Re: Posting hyperlink value

2004-06-15 Thread David Dorward
On 15 Jun 2004, at 14:18, Werner Otto wrote: I have a hyperlink defined as: $hostname in a form. http://validator.w3.org/ is your friend. There is no name or value attribute for the anchor element. $hostname = escapeHTML($hostname); print qq(); Then the variable is called "hostname" not "$hostnam

Posting hyperlink value

2004-06-15 Thread Werner Otto
Hi All, mit.cgi file: I have a hyperlink defined as: $hostname in a form. The $hostname values are retrieved from the mysql database in a fetch() loop. My code in host.cgi: #!/usr/bin/perl use CGI qw(:standard); print "Content-type: text/html\n\n"; $posted_hostname = param("$hostname"); Why am I