[Catalyst] Re: fcgid

2008-09-30 Thread Kaare Rasmussen
Personally? ::Engine::HTTP::Prefork + ::Plugin::Static::Simple. Then I put a reverse proxy in front (it doesn’t really matter, I’ve used Apache mod_proxy and Varnish, pick whatever you like), and teach that to cache the static files for a very, very long time. Do you have any performance data

[Catalyst] Re: fcgid

2008-09-30 Thread Aristotle Pagaltzis
* Kaare Rasmussen [EMAIL PROTECTED] [2008-09-30 08:20]: Personally? ::Engine::HTTP::Prefork + ::Plugin::Static::Simple. Then I put a reverse proxy in front (it doesn’t really matter, I’ve used Apache mod_proxy and Varnish, pick whatever you like), and teach that to cache the static files for

Re: [Catalyst] Passing UTF-8 arg in URL to DBIC search

2008-09-30 Thread Hugh Hunter
I thought about this (that passing the string in the path rather than as a parameter would make a difference). I've tried using a RewriteRule to turn the path into a query parameter but I get the same behavior. I feel like the issue is with how perl is passing the string around inside my code

Re: [Catalyst] fcgid

2008-09-30 Thread Matt S Trout
On Mon, Sep 29, 2008 at 09:46:42AM -0400, John Lee wrote: Matt S Trout wrote: fcgid is designed for shared hosting. it's basically useless for dedicated setups. I ask this, because it seems that it works better than fastcgi, it is maintained and prefered, but I can't see why.

[Catalyst] Catalyst, DBIx::Class and Moose training in the UK

2008-09-30 Thread Matt S Trout
Shadowcat are looking to start offering training in Catalyst, DBIx::Class and Moose usage, both introductory sessions and more advanced workshop-style classes. The intended format would be two-day classes on site in Lancaster (we'll either arrange accommodation or people can organise their own if

Re: [Catalyst] Passing UTF-8 arg in URL to DBIC search

2008-09-30 Thread J. Shirley
On Sat, Sep 27, 2008 at 6:51 AM, Hugh Hunter [EMAIL PROTECTED] wrote: Hello all, I've been struggling with this for some time and know there must be an answer out there. I'm using URL arguments to pass parameters to my controller. It's a site about names, so take the url

[Catalyst] CSRF

2008-09-30 Thread Dave Howorth
There's an interesting paper on CSRF mentioned on slashdot today: http://www.freedom-to-tinker.com/sites/default/files/csrf.pdf It mentions Catalyst along with some other frameworks and suggests a way to build in CSRF-protection. Cheers, Dave ___

Re: [Catalyst] CSRF

2008-09-30 Thread Wade . Stuart
Dave Howorth [EMAIL PROTECTED] wrote on 09/30/2008 10:23:10 AM: There's an interesting paper on CSRF mentioned on slashdot today: http://www.freedom-to-tinker.com/sites/default/files/csrf.pdf It mentions Catalyst along with some other frameworks and suggests a way to build in

Re: [Catalyst] CSRF

2008-09-30 Thread Ashley
On Sep 30, 2008, at 10:08 AM, Moritz Onken wrote: attackers can use POST This is possible due to the fact that flash movies can send any request to a server. You can achieve this even with a XMLHTTPRequest. If scripting is involved that makes it a XSS attack instead, though. No? -Ashley

Re: [Catalyst] CSRF

2008-09-30 Thread Moritz Onken
Am 30.09.2008 um 19:20 schrieb Ashley: On Sep 30, 2008, at 10:08 AM, Moritz Onken wrote: attackers can use POST This is possible due to the fact that flash movies can send any request to a server. You can achieve this even with a XMLHTTPRequest. If scripting is involved that makes it a

[Catalyst] mix authentication stores

2008-09-30 Thread Stephan Jennewein
Hi, is it possible to use ldap to authenticate and dbic (a database) to handle the user role relation ? So that it works like it resides all in one storage backend. If yes how do I configure that in the $application.conf ? Stephan ___ List:

Re: [Catalyst] mix authentication stores

2008-09-30 Thread Jonathan Hall
Not directly... it's not even possible in DBIC to have relationships between different databases, which is essentially what you're talking about doing. You can accomplish the same thing client-side if you write your own user store module(s), which is not fundamentally difficult. I have done

Re: [Catalyst] CSRF

2008-09-30 Thread Wade . Stuart
Moritz Onken [EMAIL PROTECTED] wrote on 09/30/2008 01:08:38 PM: Am 30.09.2008 um 19:20 schrieb Ashley: On Sep 30, 2008, at 10:08 AM, Moritz Onken wrote: attackers can use POST This is possible due to the fact that flash movies can send any request to a server. You can achieve this

Re: [Catalyst] CSRF

2008-09-30 Thread Moritz Onken
Am 30.09.2008 um 21:15 schrieb [EMAIL PROTECTED]: Moritz Onken [EMAIL PROTECTED] wrote on 09/30/2008 01:08:38 PM: Am 30.09.2008 um 19:20 schrieb Ashley: On Sep 30, 2008, at 10:08 AM, Moritz Onken wrote: attackers can use POST This is possible due to the fact that flash movies can send

Re: [Catalyst] Passing UTF-8 arg in URL to DBIC search

2008-09-30 Thread Bill Moseley
On Tue, Sep 30, 2008 at 08:10:13AM -0700, J. Shirley wrote: On Sat, Sep 27, 2008 at 6:51 AM, Hugh Hunter [EMAIL PROTECTED] wrote: Hello all, I've been struggling with this for some time and know there must be an answer out there. I'm using URL arguments to pass parameters to my

[Catalyst] Catalyst::Plugin::UploadProgress

2008-09-30 Thread Stephan Jennewein
Hi, I'm trying to use the UploadProgress plugin. At the moment it doesn't update the progressbar during the upload, but the first time it does is when I cancel the upload or it has finished. I think the problem is that I'm using Mason instead of TT . Could that be the problem and if yes is

Re: [Catalyst] Catalyst::Plugin::UploadProgress

2008-09-30 Thread Andy Grundman
On Sep 30, 2008, at 6:27 PM, Stephan Jennewein wrote: Hi, I'm trying to use the UploadProgress plugin. At the moment it doesn't update the progressbar during the upload, but the first time it does is when I cancel the upload or it has finished. I think the problem is that I'm using Mason

Re: [Catalyst] Catalyst::Plugin::UploadProgress

2008-09-30 Thread Stephan Jennewein
On Wednesday 01 October 2008 12:39:08 am Andy Grundman wrote: On Sep 30, 2008, at 6:27 PM, Stephan Jennewein wrote: Hi, I'm trying to use the UploadProgress plugin. At the moment it doesn't update the progressbar during the upload, but the first time it does is when I cancel the

Re: [Catalyst] tips for troubleshooting/QAing Unicode

2008-09-30 Thread Jonathan Rockway
* On Sat, Sep 27 2008, Darren Duncan wrote: Maybe you're already aware of this, but I've found from experience that troubleshooting encoding/Unicode problems in a web/db app can be difficult, especially with multiple conversions at different stages, but I've come up with a short generic

Re: [Catalyst] mix authentication stores

2008-09-30 Thread Matt S Trout
On Tue, Sep 30, 2008 at 08:58:04PM +0200, Stephan Jennewein wrote: Hi, is it possible to use ldap to authenticate and dbic (a database) to handle the user role relation ? So that it works like it resides all in one storage backend. If yes how do I configure that in the $application.conf

Re: [Catalyst] mix authentication stores

2008-09-30 Thread Matt S Trout
On Tue, Sep 30, 2008 at 02:26:41PM -0500, Jonathan Hall wrote: Not directly... it's not even possible in DBIC to have relationships between different databases, which is essentially what you're talking about doing. Unless you count mysql as a database in which case -table('otherdb.foo')

Re: [Catalyst] mix authentication stores

2008-09-30 Thread Tomas Doran
On 1 Oct 2008, at 02:05, Matt S Trout wrote: On Tue, Sep 30, 2008 at 08:58:04PM +0200, Stephan Jennewein wrote: Hi, is it possible to use ldap to authenticate and dbic (a database) to handle the user role relation ? So that it works like it resides all in one storage backend. If yes how

Re: [Catalyst] Catalyst::Plugin::UploadProgress

2008-09-30 Thread Tomas Doran
On 1 Oct 2008, at 01:44, Stephan Jennewein wrote: On Wednesday 01 October 2008 12:39:08 am Andy Grundman wrote: What Catalyst engine are you using? What you described sounds like the behavior with the default HTTP engine. If that's what you're using, try enabling fork mode with -f. I'm

Re: [Catalyst] mix authentication stores

2008-09-30 Thread Peter Karman
Tomas Doran wrote on 9/30/08 8:24 PM: Splitting the current LDAP code so that it could be either a store and/or credential also wouldn't be hard, and I volunteer to help with the effort. yes, that's a good idea. The current LDAP auth plugin is in the Store namespace but does both Store and

Re: [Catalyst] mix authentication stores

2008-09-30 Thread jay kuri
Hello Stephan, The short answer is yes, it is possible. But you will need to do some work to make it happen. The long answer is Yee. Basically, Catalyst authentication is split into two pieces Credentials and Stores. A Store finds / holds the users. A credential is responsible for