Re: Performance Questions

2007-07-08 Thread John Drago
--- John ORourke [EMAIL PROTECTED] wrote: I've no experience of parsing XML on every request (not that I'd want to, what an overhead!) but could you just output nothing in the response phase, and put the XML object reference using $r-pnotes('my_xml_object', $my_xml_object) then in

Insecure dependency in unlink while running with -T switch

2007-07-08 Thread stevethames
mod_perl 2.0.1 Fedore Core 4 Apache Taint Mode I am trying to delete a file using an absolute path from a mod_perl script running in taint mode under apache. This error is where I stopped trying to fix the problem and decided to use a cron job to delete files no longer connected to active data

Re: Insecure dependency in unlink while running with -T switch

2007-07-08 Thread Clinton Gormley
$fp =~ /(.*)/; This doesn't untaint $fp. instead, you could do this: ( $fp )=( $fp =~ /(.*)/ ); To untaint a variable using this method, you need to assign the result of a regex capture to the variable, not just do a regex check Clint

Re: Insecure dependency in unlink while running with -T switch

2007-07-08 Thread stevethames
Clint, you are a steely-eyed, missle man! In fact, I had taken the statement '$fp =~ /(.+)/' directly from another page as a posted solution to this problem without even looking at it. After your email, I felt like an idiot as it was obvious that all this statement would do was set $ and $1.

Re: Insecure dependency in unlink while running with -T switch

2007-07-08 Thread Randal L. Schwartz
Clinton == Clinton Gormley [EMAIL PROTECTED] writes: $fp =~ /(.*)/; Clinton This doesn't untaint $fp. Clinton instead, you could do this: Clinton ( $fp )=( $fp =~ /(.*)/ ); Don't forget the /s. Remember, Unix paths can contain newline. -- Randal L. Schwartz - Stonehenge Consulting

Re: Performance Questions

2007-07-08 Thread Marc M. Adkins
Well, I _am_ using XSLT for my template expansion. That kind of makes XML important. Thanks for the responses, and that's about what I figured I would try. Just wondering if anyone would answer no it won't work because... John Drago wrote: --- John ORourke [EMAIL PROTECTED] wrote: I've

First time being here, Need Big help here!

2007-07-08 Thread Xin Chen
Hi All, Finally I find this place, I think it is the right place for me to solve this issue, here it is: My system: VMware Virtual System: brainzvm:~# uname -a Linux brainzvm 2.6.18-4-686 #1 SMP Mon Mar 26 17:17:36 UTC 2007 i686 GNU/Linux apache-perl 1.3 web server Debian Linux I got the

Re: Performance Questions

2007-07-08 Thread John ORourke
Marc M. Adkins wrote: Well, I _am_ using XSLT for my template expansion. That kind of makes XML important. Thanks for the responses, and that's about what I figured I would try. Just wondering if anyone would answer no it won't work because... Let us know how it goes - using XSLT that way

Re: First time being here, Need Big help here!

2007-07-08 Thread Foo JH
I'm not too good with Debian either, but since you're installing a new OS, my guess is you can also choose the version of the applications as well. Try installing Apache 2 or 2.2 with modperl 2, instead of Apache 1.3 + modperl. The latter is running on legacy support now. Xin Chen wrote: Hi

Re: Performance Questions

2007-07-08 Thread Foo JH
Let us know how it goes - using XSLT that way is often desirable from a developer's point of view, but is usually impractical due to the processing overhead. If you end up successfully using this technique in production without complaints from users please let the list know, I'm sure a

Re: First time being here, Need Big help here!

2007-07-08 Thread Xin Chen
Can I just update from apache1.3 to apache 2, and modperl 2 ? I will try this. Thanks! Foo JH wrote: I'm not too good with Debian either, but since you're installing a new OS, my guess is you can also choose the version of the applications as well. Try installing Apache 2 or 2.2 with

Re: First time being here, Need Big help here!

2007-07-08 Thread Foo JH
I doubt. Apache2 is a major overhaul. You're better off installing apache2 or 2.2 from scratch. Do note that modperl1 is not compatible with apache 2. Xin Chen wrote: Can I just update from apache1.3 to apache 2, and modperl 2 ? I will try this. Thanks! Foo JH wrote: I'm not too good with

Re: First time being here, Need Big help here!

2007-07-08 Thread Xin Chen
Thanks for your tips! I will reinstall Apache2 and have a try. Hopelly, I can install AuthDigest in Apache2 and modperl2. Foo JH wrote: I doubt. Apache2 is a major overhaul. You're better off installing apache2 or 2.2 from scratch. Do note that modperl1 is not compatible with apache 2. Xin

Apache2-AuthenNTLM Hanging

2007-07-08 Thread Matt Martz
I am using Apache2-AuthenNTLM and it works most of the time but in some cases it gets to this point: AuthenNTLM: Verify user johndoe via smb server And it hangs infinitely or until I restart Apache. Due to this the pages will never load. Is there a way to specify a timeout that would apply