Re: Trouble with CGI code from Code Example 7.3 of the "Python Interactive CGI Tutorial"

2007-08-21 Thread Gabriel Genellina
On 21 ago, 20:10, Steve Holden <[EMAIL PROTECTED]> wrote: > Gabriel Genellina wrote: > > [...]working crystall balls are hard to find nowadays :) > > Well, judging by the OP's response you appear to be in possession of a > pair :-) Great-grandmother's legacy, and not for sale! -- Gabriel Genellin

Re: Trouble with CGI code from Code Example 7.3 of the "Python Interactive CGI Tutorial"

2007-08-21 Thread Steve Holden
Gabriel Genellina wrote: [...]working crystall balls are hard to find nowadays :) Well, judging by the OP's response you appear to be in possession of a pair :-) regards Steve -- Steve Holden+1 571 484 6266 +1 800 494 3119 Holden Web LLC/Ltd http://www.holdenweb.com Skype

Re: Trouble with CGI code from Code Example 7.3 of the "Python Interactive CGI Tutorial"

2007-08-21 Thread epsilon
Gabriel, Thanks a bunch for your time! That took care of it. Christopher Gabriel Genellina wrote: > On 21 ago, 11:14, epsilon <[EMAIL PROTECTED]> wrote: > > > I'm having trouble with this script from a CGI lesson I'm working and > > I can't seem to figure it out. I was wondering if someone co

Re: Trouble with CGI code from Code Example 7.3 of the "Python Interactive CGI Tutorial"

2007-08-21 Thread Gabriel Genellina
On 21 ago, 11:14, epsilon <[EMAIL PROTECTED]> wrote: > I'm having trouble with this script from a CGI lesson I'm working and > I can't seem to figure it out. I was wondering if someone could tell > me what is wrong. I've spent several hours trying to debug, but no > success. Any help would be a

Trouble with CGI code from Code Example 7.3 of the "Python Interactive CGI Tutorial"

2007-08-21 Thread epsilon
opher + Python Interactive CGI Tutorial - Code Example 7.3 http://www.cs.virginia.edu/~lab2q/lesson_7/ # Define function display_page. def display_page(result, id, session_key = 0): print "\n" print "\n" print "\tInfo Form\n" p

Re: CGI Tutorial

2006-10-09 Thread Steve Holden
Lawrence D'Oliveiro wrote: > In message <[EMAIL PROTECTED]>, Steve > Holden wrote: > > >>Lawrence D'Oliveiro wrote: >> >>>In message <[EMAIL PROTECTED]>, Steve >>>Holden wrote: >>> >>> >>> Credit card numbers should be encrypted in the database, of course, but they rarely are (even by com

Re: CGI Tutorial

2006-10-09 Thread Paul Rubin
Lawrence D'Oliveiro <[EMAIL PROTECTED]> writes: > > lower. Just last week a police employee in my class told us of an > > exploit where a major credit card copmany's web site had been hacked > > using a SQL injection vulnerability. This is usually done with the > > intent of gaining access to credi

Re: CGI Tutorial

2006-10-09 Thread Lawrence D'Oliveiro
In message <[EMAIL PROTECTED]>, Steve Holden wrote: > Lawrence D'Oliveiro wrote: >> In message <[EMAIL PROTECTED]>, Steve >> Holden wrote: >> >> >>>Credit card numbers should be encrypted in the database, of course, but >>>they rarely are (even by companies whose reputations imply they ought to

Re: CGI Tutorial

2006-10-09 Thread Steve Holden
Lawrence D'Oliveiro wrote: > In message <[EMAIL PROTECTED]>, Steve > Holden wrote: > > >>Credit card numbers should be encrypted in the database, of course, but >>they rarely are (even by companies whose reputations imply they ought to >>know better). > > > How would encryption help? They'd sti

Re: CGI Tutorial

2006-10-08 Thread Lawrence D'Oliveiro
In message <[EMAIL PROTECTED]>, Clodoaldo Pinto Neto wrote: > 2006/10/4, Tim Chase <[EMAIL PROTECTED]>: > >> The code is very dangerous...allowing any ol' schmoe to run >> arbitrary code on your server. At the barest of minimums, I'd >> plaster the code with warnings that this is a Very Dangerous

Re: CGI Tutorial

2006-10-08 Thread Lawrence D'Oliveiro
In message <[EMAIL PROTECTED]>, Steve Holden wrote: > Credit card numbers should be encrypted in the database, of course, but > they rarely are (even by companies whose reputations imply they ought to > know better). How would encryption help? They'd still have to be decrypted to be used. -- htt

Re: CGI Tutorial

2006-10-06 Thread Clodoaldo Pinto Neto
[EMAIL PROTECTED] wrote: > Clodoaldo Pinto Neto wrote: > > > print 'The submited name was "' + name + '"' > > Bzzt! Script injection security hole. See cgi.escape and use it (or a > similar function) for *all* text -> HTML output. > > > open('files/' + fileitem.filename, 'w') > > BZZT. filesyst

Re: CGI Tutorial

2006-10-06 Thread Jim
Sells, Fred wrote: > content is great, my comments are editorial. > > I prefer PDF with bookmarks rather than HTML. > > If you choose to go the PDF route, I've found OpenOffice 2.0 pretty good at > generating PDF with bookmarks. Just don't get too complex or OO may hose > you. Since you replied

Re: CGI Tutorial

2006-10-06 Thread hanumizzle
On 10/5/06, Sells, Fred <[EMAIL PROTECTED]> wrote: > content is great, my comments are editorial. wrt what document? > I prefer PDF with bookmarks rather than HTML. > 1. easy to print the whole thing and read offline. > 2. easy to find a secion from bookmarks, rather that chasing links > 3. easy

RE: CGI Tutorial

2006-10-06 Thread Sells, Fred
content is great, my comments are editorial. I prefer PDF with bookmarks rather than HTML. 1. easy to print the whole thing and read offline. 2. easy to find a secion from bookmarks, rather that chasing links 3. easy to save on my local "doc" folder so I can be sure It will always be there. (i.e

Re: CGI Tutorial

2006-10-05 Thread hanumizzle
On 5 Oct 2006 14:56:54 -0700, Jim <[EMAIL PROTECTED]> wrote: > * You need a DEBUG variable: > from defaults import DEBUG > : > if DEBUG: >.. WADR, there is a more formal way to do this: http://docs.python.org/ref/assert.html Use -O to remove the assert statements, essentiall

Re: CGI Tutorial

2006-10-05 Thread Jim
Clodoaldo Pinto Neto wrote: > I'm just building a Python CGI Tutorial and would appreciate any > feedback from the many experts in this list. I'm not an expert, but I have written a lot of these and I have a couple of $0.02's. * All code you put in your writing needs to be

Re: CGI Tutorial

2006-10-05 Thread Daniel Nogradi
> I'm just building a Python CGI Tutorial and would appreciate any > feedback from the many experts in this list. > > Regards, Clodoaldo Pinto Neto > Perhaps you want to post this to the mod_python list as well: http://mailman.modpython.org/mailman/listinfo/mod_python -- ht

Re: CGI Tutorial

2006-10-05 Thread Steve Holden
[EMAIL PROTECTED] wrote: > Clodoaldo Pinto Neto wrote: > > >>print 'The submited name was "' + name + '"' > > > Bzzt! Script injection security hole. See cgi.escape and use it (or a > similar function) for *all* text -> HTML output. > > >>open('files/' + fileitem.filename, 'w') > > > BZ

Re: CGI Tutorial

2006-10-05 Thread and-google
Clodoaldo Pinto Neto wrote: > print 'The submited name was "' + name + '"' Bzzt! Script injection security hole. See cgi.escape and use it (or a similar function) for *all* text -> HTML output. > open('files/' + fileitem.filename, 'w') BZZT. filesystem overwriting security hole, possibly es

Re: CGI Tutorial

2006-10-04 Thread Gerold Penz
Clodoaldo Pinto Neto schrieb: > > http://webpython.codepoint.net > Great tutorial -- Thanks a lot!!! :D -- Gerold Penz - bcom - Programmierung [EMAIL PROTECTED] | http://gerold.bcom.at | http://sw3.at Ehrliche, herz

Re: CGI Tutorial

2006-10-04 Thread [EMAIL PROTECTED]
Several times you improperly spell "syntax" "sintax". Other than that it appears to be an excellent tutorial. Clodoaldo Pinto Neto wrote: > I'm just building a Python CGI Tutorial and would appreciate any > feedback from the many experts in this list. > > Re

Re: CGI Tutorial

2006-10-04 Thread Clodoaldo Pinto Neto
2006/10/4, Tim Chase <[EMAIL PROTECTED]>: > >> I'm just building a Python CGI Tutorial and would appreciate any > >> feedback from the many experts in this list. > > > > http://webpython.codepoint.net > > > Thanks! :) > > My first no

Re: CGI Tutorial

2006-10-04 Thread Tim Chase
>> I'm just building a Python CGI Tutorial and would appreciate any >> feedback from the many experts in this list. > > http://webpython.codepoint.net Thanks! :) My first note would be regarding http://webpython.codepoint.net/shell_commands The code is very dang

Re: CGI Tutorial

2006-10-04 Thread Clodoaldo Pinto Neto
Clodoaldo Pinto Neto wrote: > I'm just building a Python CGI Tutorial and would appreciate any > feedback from the many experts in this list. http://webpython.codepoint.net -- http://mail.python.org/mailman/listinfo/python-list

Re: CGI Tutorial

2006-10-04 Thread Clodoaldo Pinto Neto
Clodoaldo Pinto Neto wrote: > I'm just building a Python CGI Tutorial and would appreciate any > feedback from the many experts in this list. http://webpython.codepoint.net -- http://mail.python.org/mailman/listinfo/python-list

Re: CGI Tutorial

2006-10-04 Thread Tim Chase
> I'm just building a Python CGI Tutorial and would appreciate > any feedback from the many experts in this list. First item of feedback...post something on which to give feedback, such as a link to the work in progress. :) -tkc -- http://mail.python.org/mailman/listinfo/python-list

CGI Tutorial

2006-10-04 Thread Clodoaldo Pinto Neto
I'm just building a Python CGI Tutorial and would appreciate any feedback from the many experts in this list. Regards, Clodoaldo Pinto Neto -- http://mail.python.org/mailman/listinfo/python-list