Re: Help needed urgently for installing DBI-1.25 module

2003-12-05 Thread Michael A Chase
On Fri, 5 Dec 2003 12:49:00 [EMAIL PROTECTED] wrote: > Can someone help me urgently.. > Iam trying to install DBI-1.25 on AIX 4.3 with perl version 5.005_03. > -- > /root/test1/DBI-1.25 * itte11a2 * root * > perl -V > > Summary of my perl5 (5.0 patchlevel 5 subversion 3) configur

CGI::Session V 3.94 and DBD::Pg V 1.31 under Linux

2003-12-05 Thread Ron Savage
Hi Folks The problem I have is that the session ids are never written to the sessions table. This is Postgres 7.4. I also use CGI::Session with MySQL under Windows, and there the same program works perfectly. Any ideas? -- Cheers Ron Savage, [EMAIL PROTECTED] on 6/12/2003 http://savage.net.au/

Total environment allocation failure

2003-12-05 Thread Hallin, Tomas (HQP)
Hey all, I'm trying to use the Perl DBI with the DB2 DBD, and had no problems with DB2 V7. For DB2 V8 however, I get the dreaded "Total Environment allocation failure!". I've done some searching in the list archives, and tried all the recommendations for setting up the environment variables. T

RE: binary distribution of DBD::Oracle and DBI

2003-12-05 Thread Sudhahar . Thiagarajan
Hi, Thanks for ur help. We installed Perl from bullfreeware successfully as well as DBI(1.38). But still we have hard time in installing DBD::Oracle (1.14). Any help/suggestion??? sjcux40 {root} # perl Makefile.PL Usi

Re: Intresting case of SQL Injection

2003-12-05 Thread Tim Bunce
On Fri, Dec 05, 2003 at 02:01:15PM +0100, Jenda Krynicky wrote: > From: "Avis, Ed" <[EMAIL PROTECTED]> > > I think the moral of the story is that trying to intelligently quote > > special characters like ' is difficult to get right and too likely to > > have subtle problems. Better to just forbid

RE: Intresting case of SQL Injection

2003-12-05 Thread Michael Peppler
On Fri, 2003-12-05 at 06:28, Avis, Ed wrote: > Jenda Krynicky <[EMAIL PROTECTED]> wrote: > > >>die "bad value $foo" if $foo =~ tr/'//; > >>$sql = "select * from a where x = '$foo'"; > > >>in this particular case you can assume that in SQL only another ' > >>character can terminate a strin

RE: Intresting case of SQL Injection

2003-12-05 Thread Avis, Ed
Jenda Krynicky <[EMAIL PROTECTED]> wrote: >>die "bad value $foo" if $foo =~ tr/'//; >>$sql = "select * from a where x = '$foo'"; >>in this particular case you can assume that in SQL only another ' >>character can terminate a string quoted with '. >I'm afraid this depends on the database.

Re: DBD::Pg 1.31 under mod_perl

2003-12-05 Thread Ask Solem Hoel
On Mon, 2003-12-01 at 20:43, Rudy Lippan wrote: > On Mon, 1 Dec 2003, Ask Solem Hoel wrote: > > > Anyone got this working under mod_perl yet? > > > > Just upgraded DBI from 1.32 to 1.39 and DBD::Pg from 1.22 to 1.31, > > and Apache/mod_perl suddently dies without any trace of error in > > the log

DBD Oracle compile error...

2003-12-05 Thread NIPP, SCOTT V (SBCSI)
I was hoping for a little help in troubleshooting a problem I am having with the DBD-Oracle module (1.14). I have set the ORACLE_HOME variable and the Makefile creation completes. Once I try to run the make to actually build the module it dies on me with the following output: ld:

Help needed urgently for installing DBI-1.25 module

2003-12-05 Thread A . K . Mani
Hi All, Can someone help me urgently.. Iam trying to install DBI-1.25 on AIX 4.3 with perl version 5.005_03. -- /root/test1/DBI-1.25 * itte11a2 * root * > perl -V Summary of my perl5 (5.0 patchlevel 5 subversion 3) configuration: Platform: osname=aix, osvers=4.3.3.0, archname=

Erata: Compilation Error DBD::DB2 on Linux/390

2003-12-05 Thread Roman_Gerteis
Erata to my previous request. nm looks like the following: nm /usr/src/packages/SOURCES/DBD-DB2-0.76/blib/arch/auto/DBD/DB2/DB2.so 00014330 d FileOptions.0 b2f8 t GetTrimmedSpaceLen 00014338 d NullIndicator.1 U PerlIO_printf U Perl_G

Re: [Perl DBI] RE: Intresting case of SQL Injection

2003-12-05 Thread tomg
On Fri, 5 Dec 2003, Jenda Krynicky wrote: > >die "bad value $foo" if $foo =~ tr/'//; > >$sql = "select * from a where x = '$foo'"; > > This is usualy not a viable option. > Don't forget names like d'Artagnan or O'Connel :-) Over half of my users have such names, Jenda. (In New York City w

RE: Intresting case of SQL Injection

2003-12-05 Thread Jenda Krynicky
From: "Avis, Ed" <[EMAIL PROTECTED]> > I think the moral of the story is that trying to intelligently quote > special characters like ' is difficult to get right and too likely to > have subtle problems. Better to just forbid the quotation mark: > >die "bad value $foo" if $foo =~ tr/'//; >

Compilation Error DBD::DB2 on Linux/390

2003-12-05 Thread Roman_Gerteis
Hay there, I'm facing the well known problem of: undefined symbol: SQLTables. (error message see on bottom) Did I get that right: When building the module make compiles a native DB2.so library. That one has a reference to SQLTables that should be in DBD is calling a method on the Database .so lib

Error on DBD::Oracle

2003-12-05 Thread deepak.khanna
Hello I am getting the following error while I was running a perl script . install_driver(Oracle) failed: Can't locate loadable object for module DBD::Oracle in @INC (@INC contains: /opt/perl/lib/site_perl/5.8.0/PA-RISC1.1-thread-multi/DBI/DBD /opt/perl/lib/5.8.0/PA-RISC1.1-thread-multi /opt/p

RE: Intresting case of SQL Injection

2003-12-05 Thread Avis, Ed
I think the moral of the story is that trying to intelligently quote special characters like ' is difficult to get right and too likely to have subtle problems. Better to just forbid the quotation mark: die "bad value $foo" if $foo =~ tr/'//; $sql = "select * from a where x = '$foo'"; Of c