Re: [cgiapp] Test Failures with CGI::Application::Plugin::TT

2008-03-10 Thread Ron Savage
Hi Ron It's a bug in Template. See line 213 of Template::Provider.pm, where a hard-coded '/' explains why that happens. I did not log a report on RT, but you can after cross-checking my claim :-)). Oops. Patching Template::Provider by replacing '/' with '\\' did not fix those 2 errors. Oh,

Re: [cgiapp] enciphered-cookie-only sessions

2008-03-10 Thread Mark Fuller
On Mon, Mar 10, 2008 at 3:56 AM, Ricardo SIGNES [EMAIL PROTECTED] wrote: stores your whole session in the cookie. It's stored as a base64-encoded, Rijndael-enciphered, JSON-encoded string. This seemed like a swell idea for me, I hear a lot about brute-force attacks on encryption. Also,

Re: [cgiapp] enciphered-cookie-only sessions

2008-03-10 Thread Jason Purdy
This probably goes without saying, but I would add that this approach isn't for every application. For example, we have an e-commerce application that has our user leaving our site to complete a credit card transaction and then comes back to our site to complete the order with the session id.

Re: [cgiapp] enciphered-cookie-only sessions

2008-03-10 Thread Mark Fuller
On Mon, Mar 10, 2008 at 6:15 AM, Michael Peters [EMAIL PROTECTED] wrote: I just use a URL encoded JSON cookie. I don't put anything sensitive in there. Is there a risk that this contributes to the bad reputation of cookies? One person puts stuff in a cookie and obfuscates it (presumably for

Re: [cgiapp] CGI::Application::Dispatch Install Issues

2008-03-10 Thread Todd Ross
Michael, Ok, not instead of trying to use the toolchain to install Module:: Build and then Apache::Test (if you answered yes at the prompt) I'm just going to be really dumb. If you have Apache::Test on your machine I will use it and run the mod_perl tests as well as the CGI ones. Else I

Re: [cgiapp] CGI::Application in a coding contest

2008-03-10 Thread Richard Dice
Cees, want a trip back to N. America? :-) Cheers, - Richard On Mon, Mar 10, 2008 at 10:46 AM, Jason A. Crome [EMAIL PROTECTED] wrote: I received this last week from Josh McAdams. Sorry for not passing it along sooner, but I was out sick most of last week. I don't have time to do this, but

Re: [cgiapp] CGI::Application in a coding contest

2008-03-10 Thread Michael Peters
Jason A. Crome wrote: I received this last week from Josh McAdams. Sorry for not passing it along sooner, but I was out sick most of last week. I don't have time to do this, but if anyone does and is interested, please get back to me ASAP so I can let him know. This would be fun, but alas,

Re: [cgiapp] enciphered-cookie-only sessions

2008-03-10 Thread Perrin Harkins
On Mon, Mar 10, 2008 at 9:27 AM, Mark Fuller [EMAIL PROTECTED] wrote: To me, it sounds like the kind of thing that makes people disable cookies entirely Have you tried browsing the web without cookies recently? It doesn't work at all on a large number of popular sites. For better or worse,