[cgiapp] spam email I just received, referencing the Examples wiki page

2012-05-14 Thread Mark Rajcok
Hi all, I just received this spam to my inbox: Hi Mark, I am curious if you are the person responsible for adding content to the following page: cgi-app.org/index.cgi?Examples If not, feel free to forward me on to the correct person! I came across your page during my research

[cgiapp] Wikipedia wiki page Comparison of web application frameworks updated by MarkRajcok

2011-03-21 Thread Mark Rajcok
Wikipedia page http://en.wikipedia.org/wiki/Comparison_of_web_application_frameworks#Perledited by yours truly (since CGI-Application wasn't mentioned.) Maybe someone with more knowledge (and/or time) can add CGI-App to the bottom Others table, where features are compared. Extra credit: create a

Re: [cgiapp] encoding pragma and CGI::Session

2010-09-28 Thread Mark Rajcok
On Tue, Sep 28, 2010 at 2:19 AM, Ron Savage r...@savage.net.au wrote: Todd, what was your intent with the use encoding 'utf8'; line? Do you only want to save and restore UTF-8 encoded session data? or do you want to do that PLUS have Perl consider your script (i.e., file test.pl) to

Re: [cgiapp] use persisten instance of cgiapp with cgi::fast?

2010-09-01 Thread Mark Rajcok
On Wed, Sep 1, 2010 at 12:37 PM, Mike Tonks fluffym...@googlemail.com wrote: Thanks for this Mark. I am about to embark on an upgrade from vanilla CGI::App to either mod_perl or FastCGI and will read this with interest. Given we are using a dedicated server and just want things to run as

Re: [cgiapp] Running a plain CGI::Application as FastCGI / PSGI

2010-05-19 Thread Mark Rajcok
Regarding the database connections, see http://docs.google.com/Doc?docid=0AY-OcCA2-lySZGQzNjNmZzlfNzdnYjRoZGg3Yghl=en#FastCGI_8880821961767984 Cosimo, if you try PSGI, please let us know how you make out. I want to convert an app I have from FastCGI and Apache to PSGI and Starman. -- Mark R.

Re: [cgiapp] Security, Authentication and Authorization for CGI::App

2010-03-05 Thread Mark Rajcok
Hi Nicholas, I would like to see CAP::Authentication be enhanced to have the ability to query additional database fields and make the data available to runmodes. These fields need not be related to authentication. For example, the ability to specify a user role/privilege field could then avoid

Re: [cgiapp] Security, Authentication and Authorization for CGI::App

2010-03-05 Thread Mark Rajcok
On Thu, Mar 4, 2010 at 5:56 PM, Michael Peters mpet...@plusthree.comwrote: On 03/04/2010 10:56 AM, Brad Van Sickle wrote: 2) Runmode authorization is a little trickier, but still manageable. I check the user's session in prerun and if they are not authenticated, redirect to a not

Re: [cgiapp] Future of the wiki

2010-02-27 Thread Mark Rajcok
My 2 cents about the CGI-App wiki. I recently halted development on my app to learn about Unicode and UTF-8 (and I guess I also ended up learning about character encodings in general -- wow, did I miss some important training somewhere in my past). As usual, I found many good discussions in the

Re: [cgiapp] UTF-8 output

2010-02-27 Thread Mark Rajcok
On Mon, Nov 2, 2009 at 9:27 AM, Michael Peters mpet...@plusthree.comwrote: And is there no better way for the template output than to post_process the whole template? Is there no way to get the output of tt_process as UTF-8 so that there is no post_processing necessary? I have a patched

[cgiapp] CAP::RateLimit question -- REMOTE_IP

2009-12-07 Thread Mark Rajcok
I'm looking at CAP::RateLimit and I have a question about REMOTE_IP. My apache server doesn't have that environment variable defined (nor is REMOTE_USER defined for my app -- so the remote user is not being identified. REMOTE_ADDR is defined.) How does one get REMOTE_IP to be defined?

Re: [cgiapp] CAP::Security::CSRF -- useful?

2009-12-04 Thread Mark Rajcok
own CSRF Plugin. It borrows some good ideas from ProtectCSRF in that it uses attribute handlers and adds the hidden form field to the HTML. If I ever decide to put it up on CPAN, maybe then I'd ask Mark S. to add a new method to CAP::ValidateRM. -- Mark On Thu, Dec 3, 2009 at 9:29 PM, Mark

Re: [cgiapp] CAP::Security::CSRF -- useful?

2009-12-03 Thread Mark Rajcok
(); # ... code to re-generate the original form with errors ... } --- the postrun callback/hook would do the real work, if the flag was set Comments? -- Mark On Thu, Dec 3, 2009 at 1:16 AM, Mark Rajcok mraj...@gmail.com wrote: Anyone see a solution to this problem? (other than abandoning attribute

Re: [cgiapp] CAP::Security::CSRF -- useful?

2009-12-02 Thread Mark Rajcok
callback to enforce it ... } -- Mark On Sat, Nov 28, 2009 at 10:08 PM, Mark Rajcok mraj...@gmail.com wrote: I should have searched CPAN some more first: http://search.cpan.org/perldoc?CGI::Application::Plugin::ProtectCSRF On Sat, Nov 28, 2009 at 6:21 PM, Mark Rajcok mraj...@gmail.com wrote: I

[cgiapp] CAP::Security::CSRF -- useful?

2009-11-28 Thread Mark Rajcok
I want to guard against multiple form submissions (reload, resubmit, etc.) and CSRF in my app: http://en.wikipedia.org/wiki/Cross-site_request_forgery http://www.perlmonks.org/?node_id=606832 I hacked up a simple plugin. Do you think it would be useful? or might something like this already

Re: [cgiapp] CAP::Security::CSRF -- useful?

2009-11-28 Thread Mark Rajcok
I should have searched CPAN some more first: http://search.cpan.org/perldoc?CGI::Application::Plugin::ProtectCSRF On Sat, Nov 28, 2009 at 6:21 PM, Mark Rajcok mraj...@gmail.com wrote: I want to guard against multiple form submissions (reload, resubmit, etc.) and CSRF in my app: # CGI

Re: [cgiapp] is my app caching db connection ?

2009-11-22 Thread Mark Rajcok
Thanks to the archives I found this thread related to persistent DB connections when using CAP::DBH and FastCGI. I changed my cgiapp_init() code from: $self-dbh_config( $self-config_param('dsn'),$self-config_param('user'),$self-config_param('password') ,{PrintError = 0, RaiseError =

Re: [cgiapp] Adding a div of fixed content to evey page. Possible?

2009-11-10 Thread Mark Rajcok
I'm late to the party (since I only read the list every few weeks, sorry). First question, do you really need to have the login form integrated into so many pages? The Authentication module does a nice job of presenting a separate login page when needed, then automatically redirecting you back

Re: [cgiapp] Powered by logos - first samples

2009-09-03 Thread Mark Rajcok
Very nice. Where do I send my contribution? When I think of CGI::App though, I don't think of onions or leaves... I think of... well, something fast, zippy, quick, easy-to-assemble. CGI::Apps run fast(er than Catalyst in non-mod-Perl environments), and it's easy/fast to develop with. I went

[cgiapp] simple example of CA, jQuery, Ajax added to wiki

2009-07-24 Thread Mark Rajcok
I had on my todo list (for over a year) to add to the CA wiki a simple example of using jQuery to make Ajax requests back to the server using a CA backend. I finally wrote the 62 lines of code: http://cgiapp.erlbaum.net/index.cgi?AjaxInfo # CGI::Application community mailing list

[cgiapp] Re: CAP:Authentication with an enum credential

2009-04-27 Thread Mark Rajcok
On Mon, Apr 20, 2009 at 9:13 PM, Mark Rajcok mraj...@gmail.com wrote: On Wed, Apr 15, 2009 at 9:15 AM, Mark Stosberg m...@summersault.comwrote: On Tue, 14 Apr 2009 01:06:38 -0400 Mark Rajcok mraj...@gmail.com wrote: I'm using CAP:Authentication and I have a u_state field in my Users table

[cgiapp] Re: CAP:Authentication with an enum credential

2009-04-21 Thread Mark Rajcok
On Wed, Apr 15, 2009 at 9:15 AM, Mark Stosberg m...@summersault.com wrote: On Tue, 14 Apr 2009 01:06:38 -0400 Mark Rajcok mraj...@gmail.com wrote: I'm using CAP:Authentication and I have a u_state field in my Users table. The u_state field is a MySQL enum, and can be set to created

[cgiapp] CAP:Authentication with an enum credential

2009-04-14 Thread Mark Rajcok
I'm using CAP:Authentication and I have a u_state field in my Users table. The u_state field is a MySQL enum, and can be set to created, active, restricted, or disabled. I'm trying to figure out how I can display a Sorry, your account has been disabled error page if a user with u_state=disabled

[cgiapp] [announce] OO MVC jumpstart/starter application

2008-12-04 Thread Mark Rajcok
I'm looking for feedback on a small working core of an application and tutorial that I recently wrote. The tutorial is here: http://docs.google.com/View?docID=dd363fg9_77gb4hdh7brevision=_latest The code is on sourceforge: http://perlmvccgiapp.sourceforge.net/ as is a working demo (don't expect

Re: [cgiapp] [announce] OO MVC jumpstart/starter application

2008-12-04 Thread Mark Rajcok
On Thu, Dec 4, 2008 at 5:43 PM, Ron Savage [EMAIL PROTECTED] wrote: The first thing I'd say is about user.cgi: 1) You talk about changing the value of $PRIVATE_HOME_DIR I would use a config file, and have the 2 values of $PRIVATE_HOME_DIR in that file. Yes, I know switching something in the

Re: [cgiapp] [announce] OO MVC jumpstart/starter application

2008-12-04 Thread Mark Rajcok
On Thu, Dec 4, 2008 at 5:56 PM, Ron Savage [EMAIL PROTECTED] wrote: For those people who still think MD5 offers some type of security, I suggest you direct readers to: http://en.wikipedia.org/wiki/Rainbow_table Thanks, I didn't realize I was just hashing, not really encrypting. I'll switch.

Re: [cgiapp] Re: [announce] OO MVC jumpstart/starter application

2008-12-04 Thread Mark Rajcok
On Thu, Dec 4, 2008 at 10:42 PM, Mark Stosberg [EMAIL PROTECTED] wrote: I'm looking for feedback on a small working core of an application and tutorial that I recently wrote. The tutorial is here: http://docs.google.com/View?docID=dd363fg9_77gb4hdh7brevision=_latest I've reviewed this in

Re: [cgiapp] [announce] OO MVC jumpstart/starter application

2008-12-04 Thread Mark Rajcok
On Thu, Dec 4, 2008 at 10:38 PM, Mark Rajcok [EMAIL PROTECTED] wrote: For those people who still think MD5 offers some type of security, I suggest you direct readers to: http://en.wikipedia.org/wiki/Rainbow_table Thanks, I didn't realize I was just hashing, not really encrypting. I'll

Re: [cgiapp] Model design in C::A/Titanium

2008-10-22 Thread Mark Rajcok
On Tue, Oct 21, 2008 at 7:45 PM, Ron Savage [EMAIL PROTECTED] wrote: Hi Mark Just the Model aspect is proving a little challenging. I'm trying to ensure that all database calls are handled outside the controllers, and to this end am using a module called WebApp::Model This seems to

Re: [cgiapp] Model design in C::A/Titanium

2008-10-21 Thread Mark Rajcok
I would appreciate some feedback on a possible MVC structure for a Titanium/CGI::App that I am currently building. I'm using CA::Dispatch to allow multiple apps with a small number of rm's each. Views are handled by CAP::TT. Just the Model aspect is proving a little challenging. I'm trying

[cgiapp] Ajax app using CAP -- return JSON or HTML?

2008-05-24 Thread Mark Rajcok
I'm writing a new CGI app, and decided to go web 2.0 -- i.e., use Ajax to update parts of the page, trying to never load an entirely new page. I'm at a crossroad: should the CAP-based back-end normally return JSON data (and let the javascript library (I've decided on jQuery) place and format

Re: [cgiapp] Authenticate after user creates an account

2007-01-06 Thread Mark Rajcok
() (or reauthenticate() or ...) method to the module, as I think it would be useful. -- Mark On 1/5/07, Ron Savage [EMAIL PROTECTED] wrote: On Thu, 4 Jan 2007 23:29:37 -0500, Mark Rajcok wrote: Hi Mark $q-param('authen_username',$q-param('username')); $q- param('authen_password',$q-param('password

[cgiapp] Authenticate after user creates an account

2007-01-04 Thread Mark Rajcok
I'm using CGI::Application::Plugin::Authentication and I'd like to authenticate a new user when I create the DB record for the new user (i.e., as part of the create a new account runmode): sub maintain_user : Runmode { # create or update a user account ... # -- if the user_id is zero, create

Re: [cgiapp] Authentication that remembers original runmode?

2006-12-28 Thread Mark Rajcok
sometimes it shows errors that CGI::Carp qw(fatalsToBrowser) doesn't. But in this case, I guess it's trying to be too smart (or maybe too dumb?!) -- Mark On 12/29/06, Cees Hek [EMAIL PROTECTED] wrote: On 12/29/06, Mark Rajcok [EMAIL PROTECTED] wrote: I'm using CGI::Application::Plugin