[Catalyst] Rose::DB

2007-03-19 Thread Christian Storm
Is anyone working on a Rose::DB catalyst model plugin? Christian ___ List: Catalyst@lists.rawmode.org Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst Searchable archive: http://www.mail-archive.com/catalyst@lists.rawmode.org/ Dev site:

Re: [Catalyst] Catalyst Exception received by e-mail?

2007-03-27 Thread Christian Storm
Splunk is a good one for this. On Mar 27, 2007, at 4:16 PM, Bill Moseley wrote: On Tue, Mar 27, 2007 at 05:12:02PM +0200, Igor Longagnani wrote: I should force my Catalyst based app to send an e-mail on every exception/error, just before sending it (the exception) out on the video when the

Re: [Catalyst] Encrypt /Decrypt URI

2007-05-17 Thread Christian Storm
One idea is to not encrypt the URI but MD5 it to prevent URL tampering. Another layer of security for authorization. On May 17, 2007, at 2:26 PM, Matt S Trout wrote: On Thu, May 17, 2007 at 07:17:40PM +0530, Harshal Shah wrote: I am trying to encrypt / decrypt all the paths used in my

Re: [Catalyst] Rate limiting password attacks

2007-08-17 Thread Christian Storm
I like the idea of the captcha after a few failed requests. Although, if it's a real person having problems logging in then the addition of the captcha just make it that much more likely that they will not be able to login. Kind of amazing how often I fail the captcha. Plus, captcha's are not

Re: [Catalyst] Rate limiting password attacks

2007-08-20 Thread Christian Storm
What's to stop the bot from grabbing the token from the home page and using it in its attack? The token has to be something the bot can't readily read, e.g., captcha. On Aug 18, 2007, at 10:11 AM, Carl Johnstone wrote: Bill Moseley wrote: Unfortunately, often want to have a login form on

Re: [Catalyst] Rate limiting password attacks

2007-08-20 Thread Christian Storm
He is referring to reposting of forms that are arrived at via the back button, e.g., breaking the cycle submit form - click back button - submit form - etc. The use case is for single use forms not for security. It wouldn't do anything to prevent a bot from scraping the HTML for that