Re: Re[2]: introducing new code with no perceived user delays?

2003-12-18 Thread Randal L. Schwartz
en, when I want to block 10.1.2.3, I simply touch /web/stonehenge/var/blocked/REMOTE_ADDR-10.1.2.3 I figure the OS is better at a file lookup than apache is at parsing a long file. :) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]

Re: introducing new code with no perceived user delays?

2003-12-20 Thread Randal L. Schwartz
vantage over Apache parsing a long file of addresses in Fred> that the OS is better at a file lookup. Hey, that looks familiar. Do I get credit? :) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> P

Re: introducing new code with no perceived user delays?

2003-12-20 Thread Randal L. Schwartz
ttp://perl.apache.org/about/contributors/other.html#Contributors Yeah, I was half joking, and I think I even knew I was already in there. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/s

Re: Bandwidth limiting module: Apache::Quota

2004-01-17 Thread Randal L. Schwartz
in last 5 minutes, bytes transferred, number of hits, and spread that out by whatever divisions you wanted. It'd just be a matter of reducing the decision logic to a single number over a certain domain (requestor, resource, number) and then setting the blocking criterion (seconds, t

Re: Bandwidth limiting module: Apache::Quota

2004-01-17 Thread Randal L. Schwartz
ad of time, I can write about what I just did from an implementation perspective, and thus release the module with module docs, and still get paid for writing a column. Joy. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stoneheng

Re: [OT] Forcing httpd's to not swap out of memory

2004-02-29 Thread Randal L. Schwartz
ng latency for my users. Post a URL for your box on a file-swapping or pr0n site. That'll ensure a continuous stream of hits. :-) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/securit

Re: Getting started with mod_perl

2004-04-08 Thread Randal L. Schwartz
ng about that. In particular, I've been drafted to give a "mod perl" talk on the Apache track at OSCON. My notes are all mod-perl1. Will I be boo'ed off the stage if I mention mod_perl2 only in passing? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095

Re: Getting started with mod_perl

2004-04-08 Thread Randal L. Schwartz
t looking to switch in the Frank> near future. Ahh, the talks I couldn't attend because I was busy manning my exhibit hall booth, trying desparately to pay my bills for the year. :) So, I'll have to change my spin a bit... can someone give me the latest pointers to "here

Re: Mod_perl - URL rewriting.

2004-04-17 Thread Randal L. Schwartz
s a trailing slash, the right side should as well. You've got unbalanced slashes. I think that might be your trouble. But I didn't read the rest of the thread carefully enough. I'm just going for the lowhanging fruit here, as it has often been my nemesis. :) -- Randal L. Schwar

Re: mod_perl presence at OSCON (and other CONs) is at danger

2004-06-08 Thread Randal L. Schwartz
of the two accepted was my dinky little mod_perl talk. And it's not even in the Perl track, but in the Apache track. I'll do everything I can to continue to beat the drum about mod_perl. I've been reading this thread with interest, but if anyone wants to ensure that I'll co

Re: mod_perl presence at OSCON (and other CONs) is at danger

2004-06-08 Thread Randal L. Schwartz
pache API? Input/output filters seem like one such Chris> thing, and surely there are others. I've personally used trans, postreadrequest, log, mime, and auth, as well as the normal content handler. Each type of the 14 handler slots provides a specific contribution to the response giv

Re: OT: mod_rewrite question

2004-06-21 Thread Randal L. Schwartz
mod_rewrite, and uses a much more familiar syntax. :) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsi

Re: FW: mod_perl regex conundrum

2004-08-02 Thread Randal L. Schwartz
the project. Simon> We estimate that we will start releasing release candidates in a month Simon> or so. As soon as I finish working through the API and a few of the Simon> critical problems are resolved. In my defense, I tried to indicate that this was merely a guess. -- Randal L. Schwa

Re: advantages of mod_perl over java servlets

2004-08-10 Thread Randal L. Schwartz
nes of code (Perl density versus Java density), true open source (if it breaks *anywhere* you can fix it or pay someone to fix it), and you get access to the CPAN. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.co

Re: advantages of mod_perl over java servlets

2004-08-10 Thread Randal L. Schwartz
otes from my "intro to mod_perl" at OSCON 2004 are at: <http://conferences.oreillynet.com/presentations/os2004/schwartz_randal.pdf> -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/&

Re: Urgent justification for perl

2004-11-19 Thread Randal L. Schwartz
r their little shopping site. And ticketmaster (gasp)! How could a company that handles millions of credit cards a day ever use something like Template Toolkit and mod_perl! They must be *crazy*! -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED

Re: mod_perl marketing

2004-11-30 Thread Randal L. Schwartz
series for Linux Magazine... it's dribbling out over the next few months, and will be on my website shortly after the embargo has passed. It's always been clear to me that the real power of mod_perl wasn't the content phase... there are so many OTHER cool things that mod_perl d

Re: mod_perl marketing

2004-11-30 Thread Randal L. Schwartz
t;can this person go here?" but "what content should this URL map to?" -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.

Re: mod_perl marketing

2004-11-30 Thread Randal L. Schwartz
ant it *after* trans, access, and auth, so that you can determine resource, host-based permission, and identify the individual. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Un

Apache::Resource needs to be released seperately to the CPAN

2004-12-12 Thread Randal L. Schwartz
This is the same problem as when other formerly CPAN modules get incorporated into a later Perl distro. Please either unincorporate it (and then cpan-delete 2.0.0-RC1), or release a separate version of it as well. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 &l

Re: Apache::Resource needs to be released seperately to the CPAN

2004-12-13 Thread Randal L. Schwartz
are already in place. Don't ask for the mechanism to change. Or, if it has to be different for mod_perl2, then call it Apache2::Request or something. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/&g

Re: Apache::Resource needs to be released seperately to the CPAN

2004-12-13 Thread Randal L. Schwartz
ib. Given that, if the Apache::Request that comes with MP2 is *not* upward compatible with the one released independently on the CPAN (for Apache1 and MP1), then it needs to have a different name. Why is this so hard to understand or comply with? Please. Just do the right thing. Create Apache2::Req

Re: Apache::Resource needs to be released seperately to the CPAN

2004-12-13 Thread Randal L. Schwartz
et an Apache::Request that works with mod_perl1. I install mod_perl2, and I get an Apache::Request that works with mod_perl2. This is unacceptable. You cannot use the same namespace for two different modules. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[

Re: Slashdot | Help Test mod_perl 2 Release Candidates

2004-12-26 Thread Randal L. Schwartz
2-RCs. Oh good. Another place to post my "use Apache2 considered harmful" rant... <http://apache.slashdot.org/comments.pl?sid=133957&cid=11186211> Thanks for pointing it out. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge

Re: Slashdot | Help Test mod_perl 2 Release Candidates

2004-12-27 Thread Randal L. Schwartz
strong opposition appears to be Stas! And this is perfectly understandable. Stas has invested himself in an unworkable path. It'll take some work to sort it out. I'm willing to help with that. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://

Re: About putting the blame on other shoulders

2004-12-28 Thread Randal L. Schwartz
we need to look at #3, #4, and #5. Now, if everyone involved agrees that #1 or #2 are workable, that's fine too. But I want this to be a community decision, not just "Stas forcing pollution into everyone else's lives". -- Randal L. Schwartz - Stonehenge Consulting Services, Inc.

Re: About putting the blame on other shoulders

2004-12-28 Thread Randal L. Schwartz
ions you have on your disk. There's only one CPAN. Perrin's point, while valid, doesn't address the indexing issue. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technic

Re: [summary] The Conflict of mp1 vs mp2 vs mp22 vs ... vs mpNN

2004-12-31 Thread Randal L. Schwartz
n the rest. And you keep repeating the lie. Shame on you. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite

Re: Updating cookies in header during request processing

2009-09-18 Thread Randal L. Schwartz
d be something as simple as DBM::Deep, which is a single-file zero-install module that gives you arbitrary persistent Perl data structures efficiently.) See my (slightly aged but still valid) write-up of this at: http://www.stonehenge.com/merlyn/WebTechniques/col61.html -- Randal L. Schwartz - Ston

Re: Updating cookies in header during request processing

2009-09-18 Thread Randal L. Schwartz
>>>>> "Michael" == Michael Peters writes: Michael> On 09/18/2009 10:33 AM, Randal L. Schwartz wrote: >> Ahh, phase 2 of cookie awareness. When you get to phase 3, you realize that >> cookies should really just be used to distinguish one browser from ano

Re: Updating cookies in header during request processing

2009-09-18 Thread Randal L. Schwartz
ave to have some sort of server-side data to say "this user most recently authenticated at this time, so I still trust him". And once you've done that, why store *any* auth client side? Just brand the browser, as my article says. -- Randal L. Schwartz - Stoneheng

Re: adding session id to entries in access log

2009-10-11 Thread Randal L. Schwartz
o log in at any part of that linked Douglas> list. That's an interesting idea... brand the browser, but rotate it from time to time, maintaining a list. Thanks for suggesting that... I'll have to explore that in some future project. -- Randal L. Schwartz - Stonehenge Consulting Serv

Re: mod_perl waters too deep

2009-12-14 Thread Randal L. Schwartz
me complete access to your data. This is why there are no "shared hosting" plans for mod_perl that don't require running completely separate clusters of apache servers. There's nothing like "su-exec" for mod_perl - it's not even possible. -- Randal L. Schwartz

Re: perl-script vs cgi-script

2010-08-01 Thread Randal L. Schwartz
>>>>> "Roland" == Roland Mai writes: Roland> The login.pl file gets executed only once. Upon subsequent refreshes it Roland> dissapears. What does that mean? Does it generate content? Are there any errors in the error log? Can you log that it is being

Re: Apache::DBI and DBIx::Class

2011-06-28 Thread Randal L. Schwartz
nded up with a very nice base class for handwritten SQL (no ORM) for a recent project. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc. See http://methodsandmessages.posterous.com/ for Smalltalk discussion

Re: Is it me or is mod_perl extremely dangerous?

2011-12-07 Thread Randal L. Schwartz
programming, and perl Tuomo> itself: No it doesn't. It's common practice. It may not be the way *you* code in Perl, but it's perfectly acceptable Perl to have a file-lexical variable. Ever heard of "inside-out objects"? That's precisely the mechanism by which th

mod_perl and utf8 and CGI->param

2014-09-02 Thread Randal L. Schwartz
What's the equivalent of $r->read() that marks the incoming stream as UTF8, so I get chars instead of bytes? Or can I just read(\*STDIN) in mod_perl2 as well? (I know that was supported at one point...) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 ht

Re: mod_perl and utf8 and CGI->param

2014-09-03 Thread Randal L. Schwartz
took a bit of work to get working, and so I think none of those are the issue.) What I need to know is what is mod_perl doing differently? Does it not respect binmode STDIN, ":utf8"? Apparently not. So if you know of a way to get mod_perl to "fix" reading from the browser pro

Re: mod_perl and utf8 and CGI->param

2014-09-04 Thread Randal L. Schwartz
et to 0, which forces read from STDIN (via $r) instead of the native STDIN. In theory. In practice, even though I've done a binmode STDIN, I'm still getting raw bytes from read(\*STDIN...), not utf8-tagged strings. Not sure what to do next. Still frustrated. Why can't the worl

Re: mod_perl and utf8 and CGI->param

2014-09-04 Thread Randal L. Schwartz
>>>>> "Randal" == Randal L Schwartz writes: Randal> Yeah, just coded that. In a BEGIN block in my app, I monkey-patched Randal> read_from_client: And then I've also tried to monkey-patch ->read just as you said. On the first read, an empty string is app

Re: mod_perl and apache 2.4

2015-05-09 Thread Randal L. Schwartz
d ports as packages, use poudriere and create your own package repo with your own custom settings. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix consulting, Technical writing, Comedy, etc. etc. Still trying to think of something clever for the fourth line of this .sig

Re: Enquiry about mod_perl project state

2015-09-01 Thread Randal L. Schwartz
ustomize *any* of the 14 phases... most of the other frameworks are content-phase only, or some limited insertion into the other phases. Hmm. 14 sounds too small. I think that was for apache 1.x. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stone

Re: Where is the mod_perl development repo?

2017-02-18 Thread Randal L. Schwartz
>>>>> "Tom" == Tom Browder writes: Tom> Any plans to support Perl 6? You mean, "Any plans to rewrite it from scratch?" You do realize that Perl 6 is an entirely different language, yes? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 5

Re: mod_perl and utf8 and CGI->param

2017-06-01 Thread Randal L. Schwartz
>>>>> "Randal" == Randal L Schwartz writes: Randal> Getting really frustrated with mod_perl2's apparent inability to Randal> probably read UTF8 input. Randal> Here's my mod_perl2 setup: Randal> Apache 2.2.[something] Randal> mod_perl

Re: mod_perl and utf8 and CGI->param

2017-06-02 Thread Randal L. Schwartz
I did this in my app, and would never think of putting that into the core CGI::Prototype where this gets used, even though it would solve the problem for everyone. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix consulti

Re: CGI module deprecation

2017-11-29 Thread Randal L. Schwartz
> libapreq/Apache::Request My CGI::Prototype is still in use by one of my primary clients, and uses the CGI module only for parsing the incoming request. The rest is a nice prototype-inheritance structure of Template Toolkit objects. print "Just another Perl hacker,"; -- Randal L. Schwa

Re: Q: Makefile.PL: SUID helper

2003-10-21 Thread Randal L. Schwartz
rl list? If you're interested in reading, or participating on topic, yes. But not if you're going to post off-topic. :) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Un

Re: Caching CGI scripts running under Apache::Registry

2003-11-26 Thread Randal L. Schwartz
e are both running on the same box, and I still see serious advantages. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See Perl

Re: Caching CGI scripts running under Apache::Registry

2003-11-27 Thread Randal L. Schwartz
KCRUISES_ROOT *] Options All MultiViews AllowOverride All Order Allow,Deny Allow from All Order Allow,Deny Deny from All DirectoryIndex inde

Re: [ANNOUNCE] mod_perl 1.999_21 (2.0.0-RC4)

2005-01-23 Thread Randal L. Schwartz
It still has CPAN indexing of Apache::PerlSections, incorrectly. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite

Re: XML parser/unparser in Perl

2005-05-08 Thread Randal L. Schwartz
mple doesn't do. If you're going to reinvent the wheel, at least make it different. And, the mod_perl list isn't the place for this. Look at modules@perl.org, please. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/>

Re: survey

2005-08-26 Thread Randal L. Schwartz
ble sources, we lose another opportunity for a Perl design win. Yes, in an ideal world, it's not the PHBs that pick the technology, but very few of us seem to live in an ideal world. Perhaps if mod_perl announced itself by default, but a simple directive turned it off? Then at least t

Bug in Apache2::PerlSections.pm - dump_special

2005-10-11 Thread Randal L. Schwartz
e line. Not sure if that was the intent, and in mod_perl1 I believe newlines were properly treated. There are no tests for this section. Perhaps some should be added. :( Grumble. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merly

MP2.0.1 - PerlSetVar / PerlAddVar broken for .htaccess

2005-10-11 Thread Randal L. Schwartz
config->get("key"); Then I should see @values for all "PerlAddVar key v1" in scope, right? It seems to work in httpd.conf files. But not .htaccess files. And yes, the .htaccess file is parsed, because bad syntax will give me the 500 error. -- Randal L. Schwartz - Stonehenge

MP2 - not loading the required class definitions

2005-10-11 Thread Randal L. Schwartz
but no... those are also spread out. Why is this design so sideways? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: MP2.0.1 - PerlSetVar / PerlAddVar broken for .htaccess

2005-10-12 Thread Randal L. Schwartz
.htaccess file. Geoffrey> $r->dir_config() ought to give merged settings, though. It doesn't. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. Se

Re: MP2.0.1 - PerlSetVar / PerlAddVar broken for .htaccess

2005-10-12 Thread Randal L. Schwartz
>>>>> "Randal" == Randal L Schwartz writes: >>>>> "Geoffrey" == Geoffrey Young <[EMAIL PROTECTED]> writes: Geoffrey> I'd be surprised if that works. $r->server->dir_config() Geoffrey> ought to give unmerged per-server Per

Thank you for modperl2

2005-10-12 Thread Randal L. Schwartz
o, expect a few dozen more "newbie" questions about modperl2 over the next few weeks as I try to integrate more of my ad-hoc things into modperl2. Thanks! -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/se

Re: PerlAddVar in sections

2005-10-15 Thread Randal L. Schwartz
eally "perl" variables, but rather dir_config thingies that are fetched with $r->dir_config("name"), so there's not really any easy way I know of to "fake" that in a section. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095

Re: Apache::DBI and NameVirtualHost

2005-10-26 Thread Randal L. Schwartz
you then do something unique per virthost in your connect_on_init, you're working against the system there, and you get broken results. One solution is to ensure that you use a different username/password per virthost, so that the connection string varies. -- Randal L. Schwartz - Stone

2.0.2 release is still broken for Apache2::PerlSections

2005-10-27 Thread Randal L. Schwartz
$self->add_config($_) for @data; } } That's one fix, or you could make add_config handle a list instead. I think this fix is closer to the docs, but the docs are a bit vague. Without this fix, setting @PerlConfig to a list of items ignores everything after the first.

Re: Roomity.com v 1.5 is a web 2.01

2005-11-09 Thread Randal L. Schwartz
p to read, ad supported; try broadband internet. ~~1131487477246~~ shenanigans> Translation: We can't even spell "safety" instead of "saftey",

Re: @CustomLog and @LogFormat directives

2005-11-10 Thread Randal L. Schwartz
self->add_config($_) for @data; } } And that works for me to enable PerlSections to actually *work*. Apparently, there are no tests for that. :( -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: autogenerating virtual hosts

2005-12-01 Thread Randal L. Schwartz
x27;d rather fork (usually needlessly) two times per virthost? Ick. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: Is $ENV{HTTP_X_FORWARDED_HOST} reliable

2005-12-17 Thread Randal L. Schwartz
tem. Boysenberry>I was wondering if $ENV{HTTP_X_FORWARDED_HOST} is a reliable way Boysenberry> to determine the domain of the request; or is it easily spoofed? telnet your.server.example.com 80 GET /some/url HTTP/1.0 X-forwarded-for: some-other-host CR CR Yeah, that's

Re: go crazy with me

2005-12-20 Thread Randal L. Schwartz
backend will spit the entire response, and go free to service the next request... your thin front-end will then deliver that response slowly as needed. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consult

Re: go crazy with me

2005-12-21 Thread Randal L. Schwartz
necting shouldn't be much of an issue here, because your front and back machines are probably very close together, and the cost of lookup and reverse lookup shouldn't be much. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merl

Re: Adding customs httpd.conf data in mod_perl 2.0

2005-12-30 Thread Randal L. Schwartz
thing like that to httpd.conf: Curtis>PerlModule Some::Application You can have the import() of this module add conf information directly. See http://perl.apache.org/docs/2.0/api/Apache2/CmdParms.html and http://perl.apache.org/docs/2.0/api/Apache2/ServerUtil.html about "add_config".

Re: -M in modperl

2006-01-12 Thread Randal L. Schwartz
say where you thought the Kernel was to blame? Can you show an example? This is a bit like blaming the car when you hit the curb while parking. *Maybe* it's the car, but when millions of people manage to park a car just fine, it might not be the car. :) -- Randal L. Schwartz - Stonehenge C

Re: A question for the newbies

2006-02-16 Thread Randal L. Schwartz
rst and loop.last *rock*. If you find yourself agonizing over the very-easy-to-learn TT syntax, you're doing *too* much in TT. It's self-limiting. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/&

Re: A question for the newbies

2006-02-17 Thread Randal L. Schwartz
ep deprivation! :) >From what I recall, the *first* version of PHP was a simple CGI-Perl script. I don't think mod_perl was ever involved. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/secur

Re: [OT] modperl vs. Ruby

2006-02-24 Thread Randal L. Schwartz
ke HTML::Mason if you need something Ryan> serious. Catalyst has quite a bit of that JS integration completed already. Of all the existing Perl frameworks, Catalyst is definitely the closest to RonR. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.

Re: [OT] modperl vs. Ruby

2006-02-25 Thread Randal L. Schwartz
p. The Perl folks are the leaders here. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: the dreaded 'subroutine redefined'

2006-05-03 Thread Randal L. Schwartz
>>>>> "Matthew" == Matthew <[EMAIL PROTECTED]> writes: Matthew> None of my subroutines are prototyped. They all follow the format: Matthew> sub () { Matthew> Matthew> } You realize that's a prototype? :) -- Randal L. Schwartz - S

Re: Anyone using CGI::Simple?

2007-01-10 Thread Randal L. Schwartz
appear to mostly be related to >> the same issue, and I tried emailing him about this using the contact >> email he provided at http://www.perlmonks.org/?node=tachyon. Why would anyone use this instead of CGI.pm? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 5

MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)

2007-03-22 Thread Randal L. Schwartz
ng before it gets this far, I presume. Ick. "Hello, CERT?" -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: MP1 Security issue (was Re: [mp1] PerlRun fails if path_info contains special symbols)

2007-03-22 Thread Randal L. Schwartz
>>>>> "Randal" == Randal L Schwartz writes: >>>>> "Alex" == Alex Solovey <[EMAIL PROTECTED]> writes: Alex> The problem is due to unescaped variable interpolation in regular Alex> expression $uri =~ /$path_info$/ in sub namespace_

Re: MP1 Security issue

2007-03-22 Thread Randal L. Schwartz
>>>>> "Fred" == Fred Moyer <[EMAIL PROTECTED]> writes: Fred> Ok, help me out here Merlyn. Will this fix it? No, you want /\Q$path_info\E$/ -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merl

Re: MP1 Security issue

2007-03-22 Thread Randal L. Schwartz
mething right away. Release*s* you mean? Fred> Now I guess we just need that press release... Randal maybe you can get Fred> this all out on Perlcast? :) At the delay at which I usually record them, that won't be very fast. :) -- Randal L. Schwartz - Stonehenge Consulting Services

Re: MP1 Security issue

2007-03-23 Thread Randal L. Schwartz
ropriate list (the mod_perl developers). Perhaps your job for the *next* breakage is to make sure your secret mailing list is a bit more public, if you want security reports to go there instead of here. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.ston

Re: MP1 Security issue

2007-03-23 Thread Randal L. Schwartz
>>>>> "Michael" == Michael Peters <[EMAIL PROTECTED]> writes: Michael> Randal L. Schwartz wrote: >>>>>>> "Alex" == Alex Solovey <[EMAIL PROTECTED]> writes: >> Alex> The problem is due to unescaped variable inter

Re: MP1 Security issue

2007-03-23 Thread Randal L. Schwartz
all use ModPerl::RegistryCooker, and the problem is in there, my list is still accurate. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: MP1 Security issue

2007-03-23 Thread Randal L. Schwartz
>>>>> "Randal" == Randal L Schwartz writes: Randal> However, for mp2, since the listed modules all use Randal> ModPerl::RegistryCooker, and the problem is in there, my list is still Randal> accurate. Ugh. Yes, I see it now. While ModPerl::RegistryCooker ha

Re: [RELEASE CANDIDATE] mod_perl-1.30 RC1

2007-03-23 Thread Randal L. Schwartz
ooked, it was closer to the 23rd. Weird. Or is the number copied wrong? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: MP1 Security issue

2007-03-26 Thread Randal L. Schwartz
its that would be remotely useful here. This *can* be fixed for the future. (Nudge to the developers.) -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: Stonehenge::Throttle (or: using mod_perl to keep evil visitors away)

2007-04-11 Thread Randal L. Schwartz
Later, I learned to first (a) have an idea (b) write the code (c) publish the code to CPAN (d) write the magazine article about it. That order works much better. :) I've written probably a few dozen things that would have been nice CPAN modules, but are tied up in ownership tangles. -- Ran

Re: ENV

2007-04-30 Thread Randal L. Schwartz
%ENV. Those are completely unrelated variables. -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Re: Insecure dependency in unlink while running with -T switch

2007-07-08 Thread Randal L. Schwartz
>>>>> "Clinton" == Clinton Gormley <[EMAIL PROTECTED] > writes: >> $fp =~ /(.*)/; Clinton> This doesn't untaint $fp. Clinton> instead, you could do this: Clinton> ( $fp )=( $fp =~ /(.*)/ ); Don't forget the /s. Remember, Unix paths c

Re: caching reverse proxy config+init scripts

2007-11-07 Thread Randal L. Schwartz
sy. John> Am I reinventing the wheel? John> If not I'll post a link here when I'm done. You can start with what I did in http://www.stonehenge.com/merlyn/LinuxMag/col38.html -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED