RE: More questions

2000-04-30 Thread Gerald Richter
Hi > > 1. DBIxRecordset: How do I put the PrevNextForm in a table ? I > want to alwas > have the same buttons the same place in the form, like this > > First Previous Next Last > > If displaying the first rows, > it would look like > > Next Last > > Hope it is understan

RE: XSS threats and $escmode

2000-04-30 Thread Gerald Richter
> Well, I have one major concern: If I'm using $escmode = 3 (which is > pretty standard and secure at a first look) HTML tags are properly > escaped. But there is a backdoor: \<. This makes XSS hacks possible > again and your web site very insecure. Eg. enter in a input field the > following data

RE: PERL string terminator with Carriage Return...

2000-04-30 Thread Gerald Richter
  i'm sorry. embperl does remove '\r' on line 247 of eputil.c.   but actually it replaces it with a space, ' '. this makes a PERL string terminator, for example "END\r\n' become "END  \n", thus still makes PERL compile to error.   Yes, when I wrote my last answer I were in g

Re: PERL string terminator with Carriage Return...

2000-04-30 Thread Kee Hinckley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 7:58 PM +0800 4/30/00, Hello wrote: >this is important to me because i get used to dividing a long MySQL >SQL statement into several lines and terminating them by a >terminator "END", for example, > >my $st=$db->mysql(