Re: CGI Scripts and IE

2006-09-25 Thread Shawn Hinchy
Quoting David Dorward <[EMAIL PROTECTED]>: On Mon, Sep 25, 2006 at 10:53:15AM -0400, Shawn Hinchy wrote: Everything works fine in Mozilla/Firefox but when I try to use IE 6, it doesn't seem to call the script when the submit button is pressed, kind of like it knows it is already loaded and just

Re: CGI Scripts and IE

2006-09-25 Thread David Dorward
On Mon, Sep 25, 2006 at 10:53:15AM -0400, Shawn Hinchy wrote: > Everything works fine in Mozilla/Firefox but when I try to use IE 6, > it doesn't seem to call the script when the submit button is pressed, > kind of like it knows it is already loaded and just reloads it from > cache. Is this

RE: cgi scripts as root or similar - best method

2005-02-25 Thread Thomas Bätzler
Chris Devers <[EMAIL PROTECTED]> suggested: > Have you considered prefixing that command with `sudo`, and > going into the sudoers file to allow the www user that privilige? > > Of course, it would be a bit more complicated than that, as > sudo will prompt for a password that you have to pass ba

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Gavin Henry
-- Just getting into the best language ever... Fancy a [EMAIL PROTECTED] Just ask!!! > Chris Devers wrote: >> On Fri, 25 Feb 2005, Gavin Henry wrote: >> >> >>>[...] the problem is [...] cdrecord needs to be run as root. >> >> >> I assume cdrecord is being invoked from a system command, right? >

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Wiggins d'Anconia
Chris Devers wrote: On Fri, 25 Feb 2005, Gavin Henry wrote: [...] the problem is [...] cdrecord needs to be run as root. I assume cdrecord is being invoked from a system command, right? Have you considered prefixing that command with `sudo`, and going into the sudoers file to allow the www user

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Gavin Henry
> On Fri, 25 Feb 2005, Gavin Henry wrote: > >> [...] the problem is [...] cdrecord needs to be run as root. > > I assume cdrecord is being invoked from a system command, right? I know have it running fine using -T and declaring ENN{PATH} as according to the "Security" section of the camel. Yeah,

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Chris Devers
On Fri, 25 Feb 2005, Gavin Henry wrote: > [...] the problem is [...] cdrecord needs to be run as root. I assume cdrecord is being invoked from a system command, right? Have you considered prefixing that command with `sudo`, and going into the sudoers file to allow the www user that privilige?

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Paul Archer
Are you sure that cdrecord needs to run as root? You might check into changin permissions on the device itself. Or if this is a trusted machine/environment (I assume it is, 'cause most people don't write web apps to burn CDs), then you could suid cdrecord itself as root. Be sure you understand

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: This might be helpful for more users, because a system admin can create automaticly a special dir where the users can put their config files, and "insert" that file in httpd.conf. After that, every user can create its own config file, with any variabl

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
IL PROTECTED]>; "michael watson (IAH-C)" <[EMAIL PROTECTED]> Sent: Friday, September 03, 2004 3:56 PM Subject: Re: CGI scripts, security and MySQL -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <http://learn.perl.org/> <http://learn.perl.org/first-response>

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: No, the environment variables are set a single time at the start (or restart) of the web server. Ok, that's what I thought. So in what way does this help manage a pool of several users? This seems to be a solution in search of some other problem... -- Ch

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
- Original Message - From: "Chris Devers" <[EMAIL PROTECTED]> To: "Octavian Rasnita" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; "michael watson (IAH-C)" <[EMAIL PROTECTED]> Sent: Friday, September 03, 2004 3:31 PM Subject: Re: CGI script

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: You can put something like this, in httpd.conf file: include ...path_to_file And make the directory where sits that file readable only by the root user. Then, in that file, put something like: SetEnv usr user_name SetEnv pass parolissima Those 2 environme

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
uot; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, September 03, 2004 3:08 PM Subject: Re: CGI scripts, security and MySQL > On Fri, 3 Sep 2004, michael watson (IAH-C) wrote: > > > I need to make this secure such that only users I want can use the > > s

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, michael watson (IAH-C) wrote: I need to make this secure such that only users I want can use the system. I want to set up a username and password so that users can log in once at the beginning of a session, carry out their work filling in various forms and writing to the dat

Re: CGI Scripts

2003-10-13 Thread Phillip Bruce
Wiggins d'Anconia wrote: So since you are not using the OOP interface to CGI, you need to tell Perl to bring the functions into the local namespace so you can use them in the way you are, so something like: use CGI qw/:standard/; # load standard CGI routines Should help matters greatl

Re: CGI Scripts

2003-10-12 Thread Wiggins d'Anconia
Phillip Bruce wrote: Wiggins d'Anconia wrote: In the following line you need a 'my' to give the variable scope $mail = Mail::Internet->new(Header => $head, Body => [$body], Modify => 1); Ok, I did that and now I'm getting this error

Re: CGI Scripts

2003-10-11 Thread Phillip Bruce
Wiggins d'Anconia wrote: In the following line you need a 'my' to give the variable scope $mail = Mail::Internet->new(Header => $head, Body => [$body], Modify => 1); Ok, I did that and now I'm getting this error ./survey.cgi Content-

Re: CGI Scripts

2003-10-11 Thread Wiggins d'Anconia
Phillip Bruce wrote: Wiggins d'Anconia wrote: Well, I'm using perl 5.8 and I'm now getting these error messages. The errors you are getting now are because of the stricture. You have to declare the scope of all of your variables (among other things). perldoc strict For more info W

Re: CGI Scripts

2003-10-11 Thread Phillip Bruce
Wiggins d'Anconia wrote: Phillip Bruce wrote: Wiggins d'Anconia wrote: Thanks for the suggestions. Now I get totally different error. I ran this on the command line and get following: % ./survey.cgi Content-type: text/html Substitution replacement not terminated at ./survey.cgi line 37. Her

Re: CGI Scripts

2003-10-10 Thread Wiggins d'Anconia
Phillip Bruce wrote: Wiggins d'Anconia wrote: Thanks for the suggestions. Now I get totally different error. I ran this on the command line and get following: % ./survey.cgi Content-type: text/html Substitution replacement not terminated at ./survey.cgi line 37. Here is my code changes I've ma

Re: CGI Scripts

2003-10-10 Thread Phillip Bruce
Wiggins d'Anconia wrote: Phillip Bruce wrote: Hi, I have the following form that I use as survey I that I'm building for my web site. Now here is the CGI script I've written so far. #!/usr/bin/perl # use Mail::Internet; use strict; # always use warnings; # usually, at least during devel

Re: CGI Scripts

2003-10-10 Thread Wiggins d'Anconia
Phillip Bruce wrote: Hi, I have the following form that I use as survey I that I'm building for my web site. Now here is the CGI script I've written so far. #!/usr/bin/perl # use Mail::Internet; use strict; # always use warnings; # usually, at least during development # Collect parameter

Re: CGI scripts permissions

2002-12-27 Thread zentara
On Wed, 25 Dec 2002 19:39:58 +, [EMAIL PROTECTED] (Philip Pawley) wrote: >I'm a newbie, so the below is a question: Is this problem of cgi permissions >different when you are just running a perl script from a virtual include - as I am? > >Reading this thread, I did some tests and changed my s

Re: CGI scripts permissions

2002-12-25 Thread Philip Pawley
I'm a newbie, so the below is a question: Is this problem of cgi permissions different when you are just running a perl script from a virtual include - as I am? Reading this thread, I did some tests and changed my script's permissions to 500 and it still works fine. (I first did it just for a te

Re: CGI scripts permissions

2002-12-25 Thread zentara
On Wed, 25 Dec 2002 05:34:04 +0200, [EMAIL PROTECTED] (Octavian Rasnita) wrote: >Yes I know these, but ... it seems there is no solution. > >1. The web server is not in the same group with me, and if it will be made >to stay in the same group with me, the other users that have web pages on >that s

Re: CGI scripts permissions

2002-12-24 Thread Todd Wade
"Octavian Rasnita" <[EMAIL PROTECTED]> wrote in message 002901c2abd3$c17cdcb0$[EMAIL PROTECTED]">news:002901c2abd3$c17cdcb0$[EMAIL PROTECTED]... > Yes I know these, but ... it seems there is no solution. > > 1. The web server is not in the same group with me, and if it will be made > to stay in th

Re: CGI scripts permissions

2002-12-24 Thread Octavian Rasnita
n" <[EMAIL PROTECTED]> To: "Octavian Rasnita" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Wednesday, December 25, 2002 3:24 AM Subject: Re: CGI scripts permissions I assume you are connecting to a database? CGIs should have 500 permission and SHOULD NOT co

Re: CGI scripts permissions

2002-12-24 Thread Octavian Rasnita
.ro/ Email: [EMAIL PROTECTED] - Original Message - From: <[EMAIL PROTECTED]> To: "Octavian Rasnita" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, December 24, 2002 7:56 PM Subject: RE: CGI scripts permissions This is going to depend somewhat on your set

Re: CGI scripts permissions

2002-12-24 Thread Octavian Rasnita
il: [EMAIL PROTECTED] - Original Message - From: "Rene Verharen" <[EMAIL PROTECTED]> To: "Beginners-CGI List" <[EMAIL PROTECTED]> Sent: Tuesday, December 24, 2002 7:44 PM Subject: Re: CGI scripts permissions Hi, At 24-12-2002 18:09 +0200, Octavian Rasnita wro

Re: CGI scripts permissions

2002-12-24 Thread Richard KHOO Guan Chen
I assume you are connecting to a database? CGIs should have 500 permission and SHOULD NOT contain the password. Instead write a perl module which return the database_handle and put that together with the other modules (/usr/lib/perl5/5.8.0/). Then just call the module in your CGI script. Re

RE: CGI scripts permissions

2002-12-24 Thread wiggins
This is going to depend somewhat on your setup, mainly what user the web server is running as and what group it might be in. You could probably set your script to be 710 if your web server is in the same group as you but not the same user as you. Or if you go to 711, then anyone can execute the

Re: CGI scripts permissions

2002-12-24 Thread Rene Verharen
Hi, At 24-12-2002 18:09 +0200, Octavian Rasnita wrote: Please tell me what file permissions should I use for a CGI script. chmod 755 Can I deny other users to see the content of the cgi-bin directory (chmod 700) and chmod 755 only the files? Put a index.cgi in your cgi-bin directory that

Re: Cgi scripts not running...

2001-12-18 Thread Carl Franks
Chris, > I am working within a small network (10 computers). I am trying to > create a form that people can access through the f: (global drive). They > will fill in this form, and the results will be processed by my script, and > emailed to me. I have installed activeperl in the f drivebu