[users@httpd] How do I get fastcgi to resubmit a post to backend on failure?

2013-02-15 Thread P Fudd
Hi! I've got a perl fcgi application that has some parts that do file uploads. As the application is under development, I wrote some code that checks the modification time of all files listed by values(%INC) and FindBin::Bin/Script, and if something has changed, it sends a redirect to the

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread P Fudd
On 18 January 2013 16:31, Zachary Stern z...@enternewmedia.com wrote: I wanted to get some opinions - do you folks think running httpd in a chroot jail is necessary on a server that only does httpd-serving and nothing else? A chroot jail prevents a hacker from accessing anything you don't put

Re: [users@httpd] running httpd in chroot jail

2013-01-18 Thread P Fudd
Zachary Stern z...@enternewmedia.com wrote: Does it make sense to block outgoing connections for a web server? There are some cases where our apps do connect to things like external APIs, and they do it on the backend, not necessarily in-browser. Block outgoing connections to anything apart

[users@httpd] Re: How do I log fcgid stdin/stdout?

2012-12-20 Thread P Fudd
Hi all, I've found the answer, and it's a fairly good one: mod_firehose Before finding mod_firehose, I was modifying mod_dumpio to generate a separate log file without the extraneous diagnostic bits. Google revealed mod_firehose, which also started as a modification of mod_dumpio, but has been

[users@httpd] How do I log fcgid stdin/stdout?

2012-12-18 Thread P Fudd
Hello! I'm going a bit squirrelly trying to debug a FastCGI-enabled perl program. At this point, I just want to see what the client is sending and receiving. Normally, I'd pull out WireShark and watch the traffic, but this is https traffic, and turning off ssl would break the application in