Re: File Upload Questions

2002-11-15 Thread Issac Goldstand
So far, I've seen two suggestions; both are very good, and I wanted to try to offer a combination, based on a real implementation. The relevant parts of the source code for uploading the content (as related to writing the actual file on the server): my $r=shift; my

Re: Apache::DBI and password security

2002-11-15 Thread Rafiq Ismail (ADMIN)
On Fri, 15 Nov 2002, [iso-8859-1] Faßhauer, Wolfgang, FCI3 wrote: one database user because of resource limits. The problem I see is that the password for connecting to the database is clear readable in the perl script. Does anybody know how to hide that password? Have you thought of running

Re: Apache::DBI and password security

2002-11-15 Thread Rafiq Ismail (ADMIN)
On Fri, 15 Nov 2002, Rafiq Ismail (ADMIN) wrote: On Fri, 15 Nov 2002, [iso-8859-1] Faßhauer, Wolfgang, FCI3 wrote: one database user because of resource limits. The problem I see is that the password for connecting to the database is clear readable in the perl script. Does anybody know

AW: Apache::DBI and password security

2002-11-15 Thread Faßhauer, Wolfgang, FCI3
Hi, I want to build a database application based on mod_perl and Apache::DBI. The goal of Apache::DBI is to get persistent database connections using only one database user because of resource limits. The problem I see is that the password for connecting to the database is clear readable in the

Re: AW: Apache::DBI and password security

2002-11-15 Thread Rafiq Ismail (ADMIN)
On Fri, 15 Nov 2002, [iso-8859-1] Faßhauer, Wolfgang, FCI3 wrote: Have you thought of running your webserver as some 'www' user? You can then make your scripts readonly by a 'dev' group which the www user and the developes are members of. CORRECT: 'readonly' should be 'only readable' by

AW: Apache::DBI and password security

2002-11-15 Thread Faßhauer, Wolfgang, FCI3
Yes, that's our plan, too. But the risk still remains that someone will get a look to the script. I think, there is a golden rule: Never put clear text passwords in files. Those files are stored in archives by backup for example. There maybe a lot of people (sysadmin, developer, ...)

Re: AW: Apache::DBI and password security

2002-11-15 Thread Rafiq Ismail (ADMIN)
On Fri, 15 Nov 2002, [iso-8859-1] Faßhauer, Wolfgang, FCI3 wrote: Hmm. I think that the guy who wrote Blowfish_PP would cut my danglies off for that one. This is an interesting idea. Cutting my danglies off? hmm. Sounds painful. Many thanks to you, Rafiq! s'ok, although I wouldn't implement

RE: URI escaping question

2002-11-15 Thread Narins, Josh
According to RFC 2396 (http://www.ietf.org/rfc/rfc2396.txt) the reserved characters in the query component of a URI are ;, /, ?, :, @,, =, +, ,, and $. As amended by RFC 2732(http://www.ietf.org/rfc/rfc2732.txt) the characters [ and ] have been added (formerly _unwise_) There is also an

Re: File Upload Questions

2002-11-15 Thread Dennis Daupert
Thanks all for the suggestions; I really appreciate the help. I will tuck BINMODE away for future reference. Before I got those ideas, while digging around in the mailing list archives I found a reference to the link function in Apache::Request that creates a hard symlink to a specified path

Re: AW: Apache::DBI and password security

2002-11-15 Thread Matthew Byng-Maddick
On Fri, Nov 15, 2002 at 12:52:13PM +, Rafiq Ismail (ADMIN) wrote: $Apache::PARANOID::dbiPassword = $bfish-decrypt($encryptedPassword); then whenever you want your password you access $Apache::PARANOID::dbiPassword. Hmm. I think that the guy who wrote Blowfish_PP would cut my

Re: AW: Apache::DBI and password security

2002-11-15 Thread James G Smith
=?iso-8859-1?Q?=22Fa=DFhauer=2C_Wolfgang=2C_FCI3=22?= [EMAIL PROTECTED] ads.net wrote: Hi, I want to build a database application based on mod_perl and Apache::DBI. The goal of Apache::DBI is to get persistent database connections using only one database user because of resource limits. The

DBI question

2002-11-15 Thread Brett . Gillett
Hiya everyone, I am new to mod_perl and have a question about generating dynamic webpages from a mysql database. I have a script that queries a IDS database and generates results such as Top 5 Signatures, etc. The problem is when I pass the results to the web interface it seems to be looping.

RE: DBI question

2002-11-15 Thread Narins, Josh
Brett; The script, and variables, are being cached. Declaring the variables in the smallest possible scope with my should do the trick. The reason that you sometimes see only 5 is that you are hitting an apache child which has not been hit before. Reading this will

Namespace problem

2002-11-15 Thread Thomas Hilbig
I am having a namespace problem that is a slight twist to that described in the 1.0 docs http://perl.apache.org/docs/1.0/guide/porting.html#Name_collisions_with_Modules_and_libs My problem is even simpler, but worse. If I have two CGI programs using the same required script. Initially one works

Re: please help... mod_ssl seems to overwrite mod_perl and mod_perls eems to overwrite mod_ssl

2002-11-15 Thread Danny Rathjens
I followed the instructions in INSTALL.simple.mod_ssl and did: setenv SSL_BASE SYSTEM setenv EAPI_MM SYSTEM cd mod_ssl-2.8.10-1.3.26 ./configure --with-apache=../apache_1.3.26/ cd ../mod_perl perl Makefile.PL DO_HTTPD=1 APACHE_PREFIX=/usr/local/apache APACHE_SRC=../apache-1.3.26/src USE_APACI=1

RFC: Template::YetAnother

2002-11-15 Thread Thomas Klausner
Hi! Yes, this is a RFC for Yet Another Templating System. I know that there are a lot of those around. But this own might be different/interesting (at least I think/hope so...) I also posted this on perlmonks: http://www.perlmonks.org/index.pl?node_id=213300 So, here it is, in POD format: =pod

please help... mod_ssl seems to overwrite mod_perl and mod_perl seems to overwrite mod_ssl

2002-11-15 Thread Mitchel, Jennifer (Jem)
Hi all, How do I get BOTH mod_perl and mod_ssl built into and working in Apache? I had mod_perl successfully built into my apache to use Authentication hook. Then I added mod_ssl in and I started to get errors from my .htaccess file Error: [Fri Nov 15 14:39:03 2002] [alert]

timing downloads with mod_perl

2002-11-15 Thread Nick
I would like to log the time it take users to download items from my site. Has anyone has any success writing a mod perl prog to accomplish this? Thanks! __ Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site

Executing Apache::Registry cached script from normal mod_perl

2002-11-15 Thread Matthew Hodgson
Hi, I have a script which executes under Apache::Registry and resides in /perl/blah.pl. However, it only generates a fragment of a page, and is normally embedded into an html template using SSI with something like: !--#perl sub=Apache::Include arg=/perl/blah.pl -- I am very aware that this

Re: Executing Apache::Registry cached script from normal mod_perl

2002-11-15 Thread Josh Chamas
Matthew Hodgson wrote: Hi, I have a script which executes under Apache::Registry and resides in /perl/blah.pl. However, it only generates a fragment of a page, and is normally embedded into an html template using SSI with something like: !--#perl sub=Apache::Include arg=/perl/blah.pl -- I am

Re: RFC: Template::YetAnother

2002-11-15 Thread Josh Chamas
Thomas Klausner wrote: Hi! Yes, this is a RFC for Yet Another Templating System. I know that there are a lot of those around. But this own might be different/interesting (at least I think/hope so...) I also posted this on perlmonks: http://www.perlmonks.org/index.pl?node_id=213300 So, here it