Re: lingerd mod_perl mod_ssl

2001-03-01 Thread Wim Kerkhoff
Roger Espel Llima wrote: Vivek Khera wrote: mod_ssl alters the Apache API, so if you're doing the same then that's why they clash. Either that or you're patching something near what mod_ssl patches. Good guess. mod_ssl adds some initialization code add the end of common_init(), and

Re: security

2001-03-01 Thread Kee Hinckley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 9:44 AM +0800 3/1/01, Stas Bekman wrote: At this moment anybody who has an access to mod_perl server can read any data which is accessible by the same server. suexec is not an option because of process persistance. I suspect this is why it is

Re: security

2001-03-01 Thread Gunther Birznieks
mod_perl 2.0 At 10:33 PM 2/28/2001 -1000, Kee Hinckley wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 9:44 AM +0800 3/1/01, Stas Bekman wrote: At this moment anybody who has an access to mod_perl server can read any data which is accessible by the same server. suexec is not an option

Re: security

2001-03-01 Thread Stas Bekman
On Thu, 1 Mar 2001, Gunther Birznieks wrote: mod_perl 2.0 At 10:33 PM 2/28/2001 -1000, Kee Hinckley wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 9:44 AM +0800 3/1/01, Stas Bekman wrote: At this moment anybody who has an access to mod_perl server can read any data which is

Passing control from one apache module to another

2001-03-01 Thread Michael Turley
Hello, I am writing an apache perl module which logs HTTP environment variables. This is fine for static content (html, images) but is a problem for dynamic content such as php. I want my module to process the required HTTP variables and seamlessly pass the http request back to the control of

Re: Passing control from one apache module to another

2001-03-01 Thread Matt Sergeant
On Thu, 1 Mar 2001, Michael Turley wrote: Hello, I am writing an apache perl module which logs HTTP environment variables. This is fine for static content (html, images) but is a problem for dynamic content such as php. I want my module to process the required HTTP variables and

Re: lingerd mod_perl apache_ssl

2001-03-01 Thread Michael
Vivek Khera wrote: mod_ssl alters the Apache API, so if you're doing the same then that's why they clash. Either that or you're patching something near what mod_ssl patches. Using apache_ssl requires no alteration of the current lingerd. Built it last night and am currently testing.

Re: Passing control from one apache module to another

2001-03-01 Thread Perrin Harkins
I am writing an apache perl module which logs HTTP environment variables. This is fine for static content (html, images) but is a problem for dynamic content such as php. Why doesn't Log Format work for you? - Perrin

Re: apache question...

2001-03-01 Thread Robert Landrum
RedirectMatch ^/index.html http://new.server.com/index.html Rob At 8:33 PM -0700 2/28/01, Joseph Crotty wrote: I am set up on apache_1.3.14/mod_perl currently, however, have an older non-mod_perl apache_1.3.6. The old apache's index.html needs to redirect to the index.html on the new

HTML Mason 1.0 setup

2001-03-01 Thread Rob Bloodgood
I've been using HTML::Mason under mod_perl on my site for awhile, using 0.89, and I like it lots. :-) So when the new 1.0 came out, I went to go upgrade, and broke EVERYTHING. Not only that, but, I haven't been able to make sense out of what Mason wants for its dir heirarchy, anyway: First,

Re: HTML Mason 1.0 setup

2001-03-01 Thread Ray Zimmerman
At 11:03 AM -0800 3/1/01, Rob Bloodgood wrote: I've been using HTML::Mason under mod_perl on my site for awhile, using 0.89, and I like it lots. :-) So when the new 1.0 came out, I went to go upgrade, and broke EVERYTHING. Not only that, but, I haven't been able to make sense out of what Mason

Re: Passing control from one apache module to another

2001-03-01 Thread Michael Turley
You mean in httpd.conf? I could use that but what I hoped to do was pull http vars into a database for each server request. This is so someone could interactively view accesses rather than reviewing static pregenerated files. The overhead of opening and closing readonly filehandles on different

Re: HTML Mason 1.0 setup

2001-03-01 Thread Bill McCabe
Hi Rob I just went through this exact situation this morning. I ended up (unnecessarily) recompiling apache/mod_perl in the hopes of fixing it. All that really needed to be done was to add "use HTML::Mason::ApacheHandler;" to mason's handler.pl. I'm assuming your v0.89 site was working properly.

Re: security

2001-03-01 Thread Jimi Thompson
Probably a stupid question, but wouldn't named virtuals solve this problem? I'm not all that familiar with MySQL, but we have a similar set up here with slightly different technology - Solaris, Netscape Enterprise Server, and Oracle. I should think that you could replicate this using BSD,

Using Apache::Sandwich on php files

2001-03-01 Thread Clint Gilders
Hi I'm trying to figure out how to "Sandwich" php files. Is this possible? For my .htm* files I have: FilesMatch "\.html|htm$" SetHandler perl-script PerlHandler Apache::Sandwich PerlSetVar HEADER "/includes/head.html" PerlSetVar SandwichHandler

mod_php mod_perl install with apache problems - same story :(

2001-03-01 Thread Terry Davis
Hello! Well, I have seen a ton of people with this problem but no answers. I have mod_php compiled in with apache along with mod_ssl. I want to use apxs to build mod_perl. I have done this and apache starts fine, but it does not render the perl, for lack of better terms. It simply prints the

Re: HTML Mason 1.0 setup

2001-03-01 Thread Karl M. Hegbloom
"Ray" == Ray Zimmerman [EMAIL PROTECTED] writes: Ray At 11:03 AM -0800 3/1/01, Rob Bloodgood wrote: and in the same vein, the *ONLY* way I could get it to run was to put it's data_dir under DocumentRoot as well. Ray Is it a file permissions problem? If you're

Re: mod_php mod_perl install with apache problems - same story :(

2001-03-01 Thread Wade Burgett
This is probably what you need more or less. You have to tell Apache what files are your mod perl scripts (or more specifically what files you want handled by Apache::Registry - the persistent cgi program module). Alias /perl/ /home/httpd/perl/ PerlModule Apache::Registry Location /perl

security!

2001-03-01 Thread Gustavo Vieira Goncalves Coelho Rios
After some time playing with modperl, i realized some problem (that's the way i call them) related with modperl! By looking the way modperl works today, it's clearly it were not desgined to SECURELY support a multi-user environment. For instance: Any user can write a script that will be able to

Re: security!

2001-03-01 Thread Vladimir Ivaschenko
Take a look at http://www.freevsd.org. I haven't used it personally, but it looks like something that you need.. This system is a based on making a chroot environment for each user with his own apache and everything. Gustavo Vieira Goncalves Coelho Rios wrote about "security!": After some

Re: security!

2001-03-01 Thread clayton cottingham
Vladimir Ivaschenko wrote: Take a look at http://www.freevsd.org. I haven't used it personally, but it looks like something that you need.. This system is a based on making a chroot environment for each user with his own apache and everything. i can vouch for this approach to development

CONNECT proxy rewrite

2001-03-01 Thread Chris Lewis
Does anybody know how to alter the destination of a CONNECT transaction (in this case "secure proxy" request) in mod_perl? $r-uri("newplace:newport") in a Trans handler doesn't seem to do it.

Re: security

2001-03-01 Thread Todd Finney
Stas Bekman wrote: On Wed, 28 Feb 2001, Gustavo Vieira Goncalves Coelho Rios wrote: the key user\password are kept inside this file, so anyone can uses an editor to retrieve the user mysql account. I resolve this problem running php on secure mode and chgrping the php file the same

Re: [OT] security!

2001-03-01 Thread Andrew Ho
Hello, GRBy looking the way modperl works today, it's clearly it were not GRdesgined to SECURELY support a multi-user environment. For instance: Any GRuser can write a script that will be able to read any file owned by the GRhttpd server, in a multi-user environment it should not be allowed.

RE: security!

2001-03-01 Thread mgraham
This is a general Unix webserver issue and not specific to mod_perl, so I've marked your message [OT] for off-topic. Well, workarounds are available for specific webserver environments, so I don't believe it's an inappropriate question. With CGI, you use the suexec mechanism to start

RE: security!

2001-03-01 Thread Matt Sergeant
On Thu, 1 Mar 2001, [EMAIL PROTECTED] wrote: This is a general Unix webserver issue and not specific to mod_perl, so I've marked your message [OT] for off-topic. Well, workarounds are available for specific webserver environments, so I don't believe it's an inappropriate question.

(changing userids/2.0/suexec) was: RE: security!

2001-03-01 Thread Tom Brown
This is a general Unix webserver issue and not specific to mod_perl, so I've marked your message [OT] for off-topic. Well, workarounds are available for specific webserver environments, so I don't believe it's an inappropriate question. With CGI, you use the suexec mechanism

RE: HTML Mason 1.0 setup

2001-03-01 Thread Steven Vetzal
Hi Rob, I've been using HTML::Mason under mod_perl on my site for awhile, using 0.89, and I like it lots. :-) So when the new 1.0 came out, Me too 8^) I'm a Mason junkie for going on 4 years now I think - since 0.4 8^) I went to go upgrade, and broke EVERYTHING. There are some very

RE: security!

2001-03-01 Thread mgraham
And forking a new process under mod_perl really defeats the purpose. Does it? Well I confess I just assumed. I used to believe that too, but now that I've developed applications that make rather extensive use of the Apache API, I would actually love to have an environment similar

Tip : building Apache modules under Compaq Tru-64 Unix (formerly Digital Unix / OSF1)

2001-03-01 Thread Arthur Watts
Guys, Those of us with Tru-64 often run into some interesting problems when buiilding Open Source software, particularly software which does not come with a configure script. The recent upgrade to v5.0 of Tru-64 caught out a lot of the configure scripts, but this tip is for those who

PerlModule vs use in a Perl section

2001-03-01 Thread Pierre Phaneuf
I was using Apache::Status to learn a bit about what is loaded by my server, and I am wondering about a detail... If I put this: Perl use Apache::Foo; /Perl Or this: PerlModule Apache::Foo I would expect the two to behave the same, but they don't! The "use" in the Perl section does as I was