Re: [AOLSERVER] New file return.tcl adds vulnerability

2005-10-26 Thread Titi Ala'ilima
Tom Jackson wrote: Actually you can't do this, because a url can contain chars that are legal for a url, but dangerous to run 'subst' on. All you need to do is to 'not run subst', it is only used to avoid the need to quote in this particular case. For example: ns_return 301

Re: [AOLSERVER] error with ns_httpget

2006-03-30 Thread Titi Ala'ilima
ACS (Open, etc.) has a version of httpget called util_httpget, which allows a little more customization, i.e. allowing you to set headers. So the equivalent to putting the username and password into the URL is adding an Authorization header of the form Basic $token where token is

Re: [AOLSERVER] Something wrong after 2006-05-12 21:25 (was Re: Weird memory leak problem in AOLserver 3.4.2/3.x)

2006-05-17 Thread Titi Ala'ilima
We just decided to move everything left on 3.3ad13 to 4.0, but to help those who need it: Can we get everyone who's experiencing this problem to provide a few things: 1) ns_info patchlevel I think you mean info patchlevel I've got 8.3.2 2) uname -a Linux servername 2.4.21-4.EL #1 Fri

Re: [AOLSERVER] Something wrong after 2006-05-12 21:25 (was Re: Weird memory leak problem in AOLserver 3.4.2/3.x)

2006-05-17 Thread Titi Ala'ilima
] Something wrong after 2006-05-12 21:25 (was Re: Weird memory leak problem in AOLserver 3.4.2/3.x) Date: Wed, 17 May 2006 17:35:07 -0400 On 2006.05.17, Titi Ala'ilima [EMAIL PROTECTED] wrote: We just decided to move everything left on 3.3ad13 to 4.0, but to help those who need it: So, you're

Re: [AOLSERVER] Trojaned Putty? [Was: Something wrong after 2006-05-12 21:25]

2006-05-18 Thread Titi Ala'ilima
Since we don't use putty, I don't think that has anything to do with the scheduled procs problem, but you seem to having different issues. Might you have some environment differences between the two different means of logging in? -Titi CArole Lahaye wrote: Hi All, Funny stuff. Never seen

Re: [AOLSERVER] Less than virtual

2006-06-05 Thread Titi Ala'ilima
Bas Scheffers wrote: On 3 Jun 2006, at 00:56, William Scott Jordan wrote: And then the bigger question is, is there any way to tell AOLserver which SSL cert to use, based on the host information? If you are indeed talking about 1000s of sites, it may be worth it to look into some hardware

[AOLSERVER] NSD threads freezing

2006-06-14 Thread Titi Ala'ilima
We have a problem with AOLserver 4.0.10 where within the span of 15 minutes or so, the number of idle threads drops off to zero, so the nsd stops responding, but scheduled procs work fine. No clear pattern has emerged regarding what triggers it. The system could be running fine for days or

[AOLSERVER] Killing bad connections

2006-06-22 Thread Titi Ala'ilima
On AOLserver 4.0.10, ns_server active tells me that there are a couple of bad connections, file uploads that are eating up processor (the system load is consistently at or above 2.00) but not getting anywhere (stuck for nearly a day at this point). Is there any way to terminate those

Re: [AOLSERVER] AOLserver's documentation woes and its future

2006-09-05 Thread Titi Ala'ilima
Gleaning from this conversation a few main points/questions, with a couple cents of my own thrown in: 1) AOLserver probably needs a new name. Something that uses the NS initials would be ideal so that all those ns_* commands actually make sense again. Could we resurrect the NaviServer name?

Re: [AOLSERVER] AOLserver's documentation woes and its future

2006-09-05 Thread Titi Ala'ilima
Rick Gutleber wrote: 2) The biggest bang for our buck would be improving the Tcl language and the codebase available for it rather than bringing in another popular language. It took Rails to put Ruby on the map. What would our Rails be? I would be careful to say improve upon, or

Re: [AOLSERVER] AOLserver's documentation woes and its future

2006-09-05 Thread Titi Ala'ilima
1:45 PM To: AOLSERVER@LISTSERV.AOL.COM Subject: Re: [AOLSERVER] AOLserver's documentation woes and its future On 5 Sep 2006, at 17:57, Titi Ala'ilima wrote: 1) AOLserver probably needs a new name. Something that uses the NS initials would be ideal so that all those ns_* commands actually

Re: [AOLSERVER] AOLserver's documentation woes and its future

2006-09-05 Thread Titi Ala'ilima
Subject: Re: [AOLSERVER] AOLserver's documentation woes and its future On Tuesday 05 September 2006 11:06, Titi Ala'ilima wrote: How long ago did this fork take place? If AOL does indeed drop AOLserver and we rebrand it, are there any reasons other than the work involved to maintain a forked

Re: [AOLSERVER] internal server redirects

2006-09-06 Thread Titi Ala'ilima
It's not a bug, it's a feature. Seriously. Sometimes you want to return a response to the connection and then continue processing afterwards. Or at least, sometimes _I_ want to do that. :-) -Titi -Original Message- From: Daniel P. Stasinski [mailto:[EMAIL PROTECTED] Sent:

Re: [AOLSERVER] internal server redirects

2006-09-06 Thread Titi Ala'ilima
of protocol. -Titi -Original Message- From: Daniel P. Stasinski [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 2:50 PM To: AOLSERVER@LISTSERV.AOL.COM Subject: Re: [AOLSERVER] internal server redirects On 9/6/06, Titi Ala'ilima [EMAIL PROTECTED] wrote: It's not a bug, it's

[AOLSERVER] In defense of debuggers

2006-09-06 Thread Titi Ala'ilima
Another thing to remember is that different people have different ways of thinking about things. I work with another programmer who approaches things very practically and incrementally, whereas I think about problems from the big picture down. The methods we use to understand what the code is

[AOLSERVER] Handling db events in Tcl

2006-09-12 Thread Titi Ala'ilima
Title: Message Hi all, What I'd love would be a way to have an nsdthread listen for a certain db event and fire Tcl as a result. Anyone knowhow to accomplish this other than polling? I'd hate to have to grab a handle, query, and then release a handle. In a pinch I know I could have the db

Re: [AOLSERVER] Handling db events in Tcl

2006-09-12 Thread Titi Ala'ilima
I'm hoping for faster response than once a minute, but I don't want to have a thread wasting a lot of resources polling too frequently. Which is why I’d like it to be asynchronous/event-based. The AOLserver side wouldn't use any resources until explicitly called upon to do so. I'd settle for

Re: [AOLSERVER] Handling db events in Tcl

2006-09-12 Thread Titi Ala'ilima
This would best be asked in a postgres forum, but does anyone happen to know if you can use the socket command in PL/Tcl? I know I can use UTL_TCP in Oracle, and ns_sock* in AOLserver. -T. -Original Message- From: Titi Ala'ilima Sent: Tuesday, September 12, 2006 12:41 PM

[AOLSERVER] urldecoding unicode?

2006-12-05 Thread Titi Ala'ilima
I have some data urlencoded by JavaScript's escape function which is turning a Unicode apostrophe into %u2019. AOLserver doesn't recognize this. I can certainly fix this in specific locations, but to handle this universally it seems it this would need to be be fixed in ns_urldecode and/or

Re: [AOLSERVER] urldecoding unicode?

2006-12-06 Thread Titi Ala'ilima
What I meant was I can fix it on the Tcl side where I'm getting the data, but to make it universal and transparent to Tcl coders such as myself it would have to fixed in the C code of things like ns_urldecode and ns_getform. And I have neither the time nor the chops to take that on right now.

Re: [AOLSERVER] urldecoding unicode?

2006-12-06 Thread Titi Ala'ilima
After further research, I found I can use encodeURI() instead of escape() in JavaScript and I don't have this problem. Apparently escape() has a reputation for not being Unicode-friendly. So this fix probably doesn't need to be made. It doesn't quite merit mention in the AOLserver Wiki I

Re: [AOLSERVER] urldecoding unicode?

2006-12-06 Thread Titi Ala'ilima
: [AOLSERVER] urldecoding unicode? Is is possible to describe what you were sending to AOLserver so that we know what the problem was? Was it just javascript encoding a form value? thanks, tom jackson On Wednesday 06 December 2006 08:38, Titi Ala'ilima wrote: After further research, I found I