Re: Apache::ASP rules [was: Sorry men]

2000-04-28 Thread Francesc Guasch
Ime Smits wrote: Bottomline: Apache::ASP made me really happy because now don't have to develop for IIS anymore and I can stick to my Linux environment. I can I'm also being told every once in a while by management about why we aren't using IIS, you know, when they receive marketing

Re: Apache::ASP rules [was: Sorry men]

2000-04-28 Thread Joshua Chamas
Ime Smits wrote: | Oh, almost forget it... ASP is a loose of time on developer time... and the | module is to heavy, sorry but betwen oracle and ASP our server is down in | performance, we run unix on a SGI and with 256mb ram... | If you are trying to put ASP cause you don´t want to break

Re: Security in displaying arbitrary HTML

2000-04-28 Thread Dirk Lutzebaeck
Matt Sergeant writes: Unfortunately there's also a browser bug to contend with. They treat \x8b (I think that's the right code) as and there's a similar code for . Since most web developers are just doing s//lt;/g; they are open to attacks based on character sets like this. Sad, but

RE: Security in displaying arbitrary HTML

2000-04-28 Thread Leon Brocard
Jeremy Howard wrote: I'm interested in providing 'HTML email' support for my users (like HotMail, Outlook Express, Eudora 4.0, etc provide), but I'm very nervous about security. Essentially, providing HTML email involves letting any arbitrary HTML get displayed by Apache... I've been

Re: Security in displaying arbitrary HTML

2000-04-28 Thread Dirk Lutzebaeck
Matt Sergeant writes: Unfortunately there's also a browser bug to contend with. They treat \x8b (I think that's the right code) as and there's a similar code for . Since most web developers are just doing s//lt;/g; they are open to attacks based on character sets like this. Sad, but

Re: Apache::ASP rules [was: Sorry men]

2000-04-28 Thread Matt Sergeant
On Fri, 28 Apr 2000, Francesc Guasch wrote: Ime Smits wrote: Bottomline: Apache::ASP made me really happy because now don't have to develop for IIS anymore and I can stick to my Linux environment. I can I'm also being told every once in a while by management about why we aren't using

RE: Security in displaying arbitrary HTML

2000-04-28 Thread Gerald Richter
Gerald, what about Embperl, does it escape \x8b? No, there is no html escape for \x8b (and I guess the other one Matt mentioned is \0x8d for ) I know, so Embperl will not escape it, but this could be simply change by an entry in epchar.c. Any suggestion to what this should be escaped? Then I

RE: Security in displaying arbitrary HTML

2000-04-28 Thread Matt Sergeant
On Fri, 28 Apr 2000, Gerald Richter wrote: Gerald, what about Embperl, does it escape \x8b? No, there is no html escape for \x8b (and I guess the other one Matt mentioned is \0x8d for ) I know, so Embperl will not escape it, but this could be simply change by an entry in epchar.c. Any

Install probs.

2000-04-28 Thread Dominic Blythe
please reply to [EMAIL PROTECTED] as i'm not on the list... on Corel Linux (which is Debian slink)... I'm compiling mod_perl into apache 1.3.xx (19 i think) and all the mod_perl make, make install goes ok. APACI ./configure is fine too, but when i make apache, I get about a page of complaints

Re: Apache::ASP rules [was: Sorry men]

2000-04-28 Thread Tom Peer
Horror stories? On a live site when a static page is being accessed NT can lock the page and not unlock it even when you've stopped the internet service - handy when you've got someone shouting at you to change a mistake. If you change the default (eg index.htm) page in a directory to a dynamic

Re: Security in displaying arbitrary HTML

2000-04-28 Thread Marc Slemko
On Thu, 27 Apr 2000, Matt Sergeant wrote: Unfortunately there's also a browser bug to contend with. They treat \x8b (I think that's the right code) as and there's a similar code for . Since most web developers are just doing s//lt;/g; they are open to attacks based on character sets like

Re: Security in displaying arbitrary HTML

2000-04-28 Thread Matt Sergeant
On Fri, 28 Apr 2000, Marc Slemko wrote: On Thu, 27 Apr 2000, Matt Sergeant wrote: Unfortunately there's also a browser bug to contend with. They treat \x8b (I think that's the right code) as and there's a similar code for . Since most web developers are just doing s//lt;/g; they are

sample modperl script pls

2000-04-28 Thread Jaime Teng
Hi, I want to learn writing modperl scripts. Im not referring to any perl scripts that are executed by Apache::Registry, but rather a perl script that is invoked by the Apache itself - same level like Apache::Registry. also, know to fetch the URL. Is it stored in the %ENV? thanx Jaime

RE: sample modperl script pls

2000-04-28 Thread Eric Cholet
Hi, I want to learn writing modperl scripts. Im not referring to any perl scripts that are executed by Apache::Registry, but rather a perl script that is invoked by the Apache itself - same level like Apache::Registry. You're talking about handlers. The best resource is the Eagle book

Re: [RFC] modproxy:modperl ratios...

2000-04-28 Thread Dave Hodgkinson
Vivek Khera wrote: "MS" == Matt Sergeant [EMAIL PROTECTED] writes: doing - and the TCP listen queue will hold a few more connections if you are slightly short of backends. MS Is there any benefit of mod_proxy over a real proxy front end like "Oops"? Not being familiar with "Oops",

Re: Security in displaying arbitrary HTML

2000-04-28 Thread Gunther Birznieks
At 10:25 AM 4/28/00 +0100, Matt Sergeant wrote: On Fri, 28 Apr 2000, Marc Slemko wrote: On Thu, 27 Apr 2000, Matt Sergeant wrote: Unfortunately there's also a browser bug to contend with. They treat \x8b (I think that's the right code) as and there's a similar code for . Since most

out of memory

2000-04-28 Thread FEITO Nazareno
I´ve installed apache 1.3.12 and mod_perl 1.23 but when I want to start apache it starts and then eat almost all the memory on the system, I have a PII 333 with 128MB ram. When i want to access the page i can´t doit and everything get slow... when i check error_log I found a nice prhase that say:

Re: out of memory

2000-04-28 Thread Ime Smits
Getting mod_perl to suck up all RAM ain't that difficult. But you have to give us details... Ime - Original Message - From: FEITO Nazareno [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, April 28, 2000 14:22 Subject: out of memory I´ve installed apache 1.3.12 and mod_perl 1.23

Unsubscribe requests are being incorrectly routed to this list

2000-04-28 Thread Lloyd Zusman
Hello. I've been trying to unsubscribe from this mailing list for the past several days, but with no success. Some emails to `[EMAIL PROTECTED]' seem to be getting incorrectly routed to this list with the "To:" address being munged into `[EMAIL PROTECTED]'. Other emails to this same

Re: Install probs.

2000-04-28 Thread Jeff Beard
Try this when you configure Apache: --activate-module=src/modules/perl/libperl.a But before that, read the mod_perl install doc INSTALL.apaci. --Jeff At 10:02 AM 4/28/00, Dominic Blythe wrote: please reply to [EMAIL PROTECTED] as i'm not on the list... on Corel Linux (which is Debian

Re: Proxy front end behind 64k

2000-04-28 Thread Dave Hodgkinson
Matt Sergeant wrote: I'm behind a 64k leased line here (net access is *extremely* expensive here in the UK) and I was thinking, a proxy front end is probably really not necessary for me. Worst case scenario: I get 8 clients connecting to my at about 1KB/s - my pipe is maxed out anyway, so

Re: [RFC] modproxy:modperl ratios...

2000-04-28 Thread Vivek Khera
"DH" == Dave Hodgkinson [EMAIL PROTECTED] writes: DH I'm currently arguing about this very thing with my BOFH - I think we DH should have, effectively, an SSI apache and a mod_perl apache, he's I tend to call mod_perl scripts from my SSI's, so it makes sense for me to keep them on the same

Apache Redirection

2000-04-28 Thread FEITO Nazareno
May be this isn´t exactly the question for this mailing list, if it is to that way please tell me, but I really need help with this. I have a problem loading pictures on IE5, www.obsequie.com and www.obsequie.com.ar -(this redirect to www.obsequie.com) is having troubles with load images from

Re: Apache::VMonitor not loading..

2000-04-28 Thread Stas Bekman
Hi, Alex Sorry about emailing you personally, but I tried the mod_perl list with no success. I'm trying to get Apache::VMonitor to load on a new mod_perl 1.23/Apache 1.3.12/perl 5.005_03 installation. mod_perl is up and running fine, however I can't get Apache::VMonitor working. If I add

Oh oh

2000-04-28 Thread FEITO Nazareno
I was just changing some scripting things DBI and those... but now i´m trying to connect to my localhost and i receive this message: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET /scripts/formato/home.phtml

RE: Apache Redirection

2000-04-28 Thread FEITO Nazareno
I am under an IBM proxy I don´t know if that is afecting me... I´m not using mod_proxy or something like that... My httpd.conf is nothing weird...

Re: Proxy front end behind 64k

2000-04-28 Thread Matt Sergeant
On Fri, 28 Apr 2000, Dave Hodgkinson wrote: Matt Sergeant wrote: I'm behind a 64k leased line here (net access is *extremely* expensive here in the UK) and I was thinking, a proxy front end is probably really not necessary for me. Worst case scenario: I get 8 clients connecting to my

Re: Apache Redirection

2000-04-28 Thread Ime Smits
| I have a problem loading pictures on IE5, www.obsequie.com and | www.obsequie.com.ar -(this redirect to www.obsequie.com) is having troubles | ith load images from IE5, with Netscape all is ok but with IE5 no images on | the screen, is a problem about apache? If you even get MSIE not to

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Jeffrey W. Baker
On Fri, 28 Apr 2000, Joshua Chamas wrote: Dan McCormick wrote: All this talk of mod_proxy has me wondering: What's the conventional wisdom regarding the speed up or load balancing of a server running something like Apache::ASP, or anything else that tracks sessions? If you split

error in Apache::Util

2000-04-28 Thread Alex Krohn
Hi! I'm running mod_perl 1.23/apache 1.3.12/perl 5.005_03 on Mandrake 7. mod_perl seems to be up and running and things are working well. However, I add: Location /test SetHandler perl-script PerlHandler My::Test /Location and Test.pm looks like: sub handler { my $r = shift;

Re: MS IE does not accept my cookies!

2000-04-28 Thread jb
On Fri, Apr 28, 2000 at 03:01:01PM -0500, Igor Chudov @ home wrote: Glad you liked it! I am having fun writing it... I hope that it is helpful to children... Maybe, but if I see more of those punch the monkey ads, i'm going to retire to a log cabin in the woods and write an anti-web

HELP: modules/ssi...FAILED before any test output arrived

2000-04-28 Thread James Olsen
Hello, I'm trying to compile Apache 1.3.12 and mod_perl 1.23 against perl 5.005_02 I'm using this to build mod_perl/Apache: perl Makefile.PL USE_APACI=1 \ EVERYTHING=1 \ APACHE_PREFIX=$PREFIX \ APACHE_SRC=$APACHE/src \

IGNORE: modules/ssi...FAILED before any test output arrived

2000-04-28 Thread James Olsen
Hello, Sorry, I missed the line in the output stating DSO and PERLSSI don't play nice together. I should have paid more attention. My apologies. --James

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Dan McCormick
"Jeffrey W. Baker" wrote: On my sites I use a central database for storing the session objects, and all of the https servers access this central resource. Obviously if it goes down, everything is toast, but the same can be said of the database that stores all of the customer information,

mod_perl Win32 binary

2000-04-28 Thread Randy Kobes
Hi, I've placed at ftp://theoryx5.uwinnipeg.ca/pub/other/ (linked to from http://perl.apache.org/) a self-extracting archive (perl-win32-bin-0.6.exe) containing Win32 binaries of Perl-5.6.0, mod_perl-1.23, Apache_1.3.12, and mod_ssl-2.6.3-1.3.12. Perl was compiled without fork emulation, and

Help - Install mod_perl-1.23

2000-04-28 Thread James Xie
Helllo, I recently downloaded Apache_1.3.12 and installed it on Redhat 6.1, everything was working fine. I run into problems when I tried to install mod_perl-1.23. Everything was compiled ok, but I got error messages (see below) when I try to run the make test. I'm new to both Apache and

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Joshua Chamas
"Jeffrey W. Baker" wrote: With sharing state files to an NFS share, the sessions can move from server to server even if one server goes offline, which you won't find with solutions that have clients stay on a server saving session data locally in RAM or disk. On my sites I use a

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Joshua Chamas
Dan McCormick wrote: Are you using Apache::ASP to generate sessions? Has anyone tried using Tie::DBI to store Apache::ASP sessions in a db? That might solve problems with NFS sharing issues, though it might also bog things down. If you just want a simple $Session holder, you can always

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Adi
"Jeffrey W. Baker" wrote: On Fri, 28 Apr 2000, Dan McCormick wrote: "Jeffrey W. Baker" wrote: On my sites I use a central database for storing the session objects, and all of the https servers access this central resource. Obviously if it goes down, everything is toast, but

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Jeffrey W. Baker
On Fri, 28 Apr 2000, Adi wrote: "Jeffrey W. Baker" wrote: On Fri, 28 Apr 2000, Dan McCormick wrote: "Jeffrey W. Baker" wrote: On my sites I use a central database for storing the session objects, and all of the https servers access this central resource. Obviously if it

What's next for Apache::Session

2000-04-28 Thread Jeffrey W. Baker
The next version of Apache::Session is almost ready. This version is dubbed 1.50 because of it's significant-but-not-outrageous changes. The changes from 1.03 are: 1) New backing stores can stash data in Berkeley DB via the BerkeleyDB module, or any dbm format via AnyDBM_File. 2) The ID

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Jeffrey W. Baker
On Fri, 28 Apr 2000, Adi wrote: Joshua Chamas wrote: How many writes and session ties per second does this system handle, and what kind of db are you using. Currently the NetApp NFS file sharing approach seems to max out around 40 Apache::ASP style session creations per second. This

Re: What's next for Apache::Session

2000-04-28 Thread Ajit Deshpande
On Fri, Apr 28, 2000 at 03:25:18PM -0700, Jeffrey W. Baker wrote: The next version of Apache::Session is almost ready. This version is dubbed 1.50 because of it's significant-but-not-outrageous changes. The changes from 1.03 are: ... 4) The DBI interface class has been modified to

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Adi
"Jeffrey W. Baker" wrote: On Fri, 28 Apr 2000, Adi wrote: "Jeffrey W. Baker" wrote: On Fri, 28 Apr 2000, Dan McCormick wrote: "Jeffrey W. Baker" wrote: On my sites I use a central database for storing the session objects, and all of the https servers access this

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Adi
"Jeffrey W. Baker" wrote: On Fri, 28 Apr 2000, Adi wrote: Joshua Chamas wrote: How many writes and session ties per second does this system handle, and what kind of db are you using. Currently the NetApp NFS file sharing approach seems to max out around 40 Apache::ASP style

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Joshua Chamas
"Jeffrey W. Baker" wrote: Sorry for not providing exact benchmark numbers.. It ought to be a lot higher than 40/sec on that hardware. On low class hardware a year ago, I was getting number an order of magnitude higher than that with the database on the local machine. See here:

Re: What's next for Apache::Session

2000-04-28 Thread Bryan McGuire
ditto! - Original Message - From: Igor Chudov @ home [EMAIL PROTECTED] To: Jeffrey W. Baker [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, April 28, 2000 8:11 PM Subject: Re: What's next for Apache::Session reuse of already open database handles is what I was parying for. I use

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Autarch
On Fri, 28 Apr 2000, Igor Chudov @ home wrote: My persistent oracle connections are cached properly with mod_perl and are no problem. Are you loading Apache::DBI before you use Apache::Session? Also make sure that whatever params you give in your connects (or connect_on_init) match those you

Re: speed up/load balancing of session-based sites

2000-04-28 Thread Joshua Chamas
"Igor Chudov @ home" wrote: Joshua Chamas wrote: Performance on a Celeron 333/128MB/Linux/mySQL box: Create new empty session: 385 requests/second Create new session and write to it: 233 requests/second Retrieve old session: 400 requests/second Retrieve old session and read from it:

[ANNOUNCE] Apache::DumpHeaders 0.20

2000-04-28 Thread Ask Bjoern Hansen
The uploaded file Apache-DumpHeaders-0.20.tar.gz has entered CPAN as file: $CPAN/authors/id/ABH/Apache-DumpHeaders-0.20.tar.gz size: 2717 bytes md5: f826dc5f776398e826e6579557e2ac80 http://www.cpan.org/authors/id/ABH/Apache-DumpHeaders-0.20.tar.gz 0.20 Fri Apr 28 2000 -

Re: modproxy:modperl ratios...

2000-04-28 Thread Greg Stark
A few lessons on this arena: 1) Move your pictures to another server *even if you're using a proxy* Search back in the archives for my previous post on this topic. 2) If you use mod_proxy you can give it the same web root and have it serve some static objects itself instead of having to

Re: modproxy:modperl ratios...

2000-04-28 Thread shane
Yep all these things are true. Well, the part about being poorly designed is wrong, it just was designed well, then hacked to death :-), I guess I'm splitting hairs, but the essential design is easy to follow. I picked up the entire module in a just a few hours. (I just think it isn't fair to

cvs commit: modperl-2.0/src/modules/perl mod_perl.h

2000-04-28 Thread dougm
dougm 00/04/28 13:07:34 Modified:src/modules/perl mod_perl.h Log: fixed in apache-2.0 Revision ChangesPath 1.13 +0 -4 modperl-2.0/src/modules/perl/mod_perl.h Index: mod_perl.h === RCS

cvs commit: modperl-2.0/src/modules/perl modperl_callback.c modperl_interp.c

2000-04-28 Thread dougm
dougm 00/04/28 19:28:36 Modified:.00README_FIRST Makefile.PL src/modules/perl modperl_callback.c modperl_interp.c Removed: patches perl_no_get_context.pat Log: no patch to 5.6.0 is needed when PERL_SET_CONTEXT is properly used tell perl_clone() not