Re: PHP versus CGI

2004-02-20 Thread Richard MacLemale
On 2/20/04 12:00 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Thanks, that's interesting :-) I placed the files in the specified folder, according to read-me... But I have still a number of questions: - where to place the engine? - is the MC engine (which went with MC 2.5) good? - may

Re: PHP versus CGI

2004-02-20 Thread Richard MacLemale
Um, OUCH! There is ALREADY a file named rev in /usr/bin. So much for storing the rev runtime executable in /usr/bin under OS X. Fortunately, it appears you can just rename the rev file to something different, like runrev. It still works... There is no default file in /usr/bin named mc,

Re: PHP versus CGI

2004-02-19 Thread Dom
J. Landman Gay [EMAIL PROTECTED] wrote: http://www.hyperactivesw.com/downloads/IntroRevCGIs.zip Thanks, that's interesting :-) I placed the files in the specified folder, according to read-me... But I have still a number of questions: - where to place the engine? - is the MC engine (which

Re: PHP versus CGI

2004-02-18 Thread jbv
Can you elaborate? What kind of details? And did you mean intrinsic or explicit? ;-) * PHP is safer than CGI unless you add a lot to CGI ; Actually, MC CGIs are probably the most secure as they will only run scripts that are in the cgi-bin folder with the engine. You can't send it a

Re: PHP versus CGI

2004-02-18 Thread J. Landman Gay
On 2/18/04 2:59 AM, jbv wrote: A nice thing would be that someone with good CGI knowledge and competences could right a short tutorial (with clear DOs and DON'Ts) about using Rev CGI and how to configure a server (privileges settings, etc) in that context. That's been my plan ever since MacWorld,

PHP versus CGI

2004-02-17 Thread Alain Farmer
Hello Shari, Using .php to mail something is another option. Though I'm not sure how that would differ from cgi. They accomplish the same goal, e.g. web pages generated and customized ondemand, but there are major differences some of which I enumerate here : * PHP is widely-used and popular

Re: PHP versus CGI

2004-02-17 Thread Brian Yennie
FWIW, PHP sometimes _is_ run as a CGI script. It's not the norm, but PHP is just the language. The advantage that PHP, Perl and others have it that they have commonly installed web-server modules installed, which is basically a built-in CGI. - Brian * PHP is widely-used and popular ; * PHP

RE: PHP versus CGI

2004-02-17 Thread Ken Ray
* PHP deals with many of the intricit details ; Can you elaborate? What kind of details? And did you mean intrinsic or explicit? ;-) * PHP is safer than CGI unless you add a lot to CGI ; Actually, MC CGIs are probably the most secure as they will only run scripts that are in the cgi-bin

RE: PHP versus CGI

2004-02-17 Thread Alain Farmer
* PHP deals with many of the intricit details ; Did you mean intrinsic or explicit? ;-) Intricate, e.g. a large number of small details. Can you elaborate? What kind of details? With PHP, all the web-form's elements are automatically assigned to variables, with variable names with the same

Re: PHP versus CGI

2004-02-17 Thread J. Landman Gay
On 2/17/04 4:53 PM, Ken Ray wrote: Actually, MC CGIs are probably the most secure as they will only run scripts that are in the cgi-bin folder with the engine. You can't send it a script to run from the outside, so it will only do what it has been preprogrammed to do. Or at least that's my

Re: PHP versus CGI

2004-02-17 Thread Brian Yennie
I think the mitigating factor here that's being missed somewhat (although many of the point raised are valid), is that all of these setups are mostly dependent on a properly-configured webserver. If you configure things in a secure fashion, someone can write the most malicious of CGIs and it

Re: PHP versus CGI

2004-02-17 Thread Alex Rice
On Feb 17, 2004, at 5:07 PM, Brian Yennie wrote: Bad configurations make modules and CGIs both a potential hazard, good configurations make it nearly impossible to do any harm with either. Exactly my thoughts, Brian. All other things equal, security of a metacard CGI script is no different than

Re: PHP versus CGI

2004-02-17 Thread Alex Rice
On Feb 17, 2004, at 4:32 PM, Alain Farmer wrote: With PHP, all the web-form's elements are automatically assigned to variables, with variable names with the same name as the corresponding form-item, such that you can use them immediately in your script without any hassle whatsoever. Unfortunately

Re: PHP versus CGI

2004-02-17 Thread Shari
Right. The only way it could become insecure is if you specifically programmed insecurity into it. For example, a CGI that takes the parameters that are passed and does them. Anyone who writes something like that, though, probably deserves whatever they get. ;) -- Jacqueline Landman Gay Does

Re: PHP versus CGI

2004-02-17 Thread Alain Farmer
Welcome to the fray Alex, However, I've never used libCGI for MC so 'scuse me for butting in :-) OTC, please join us. :) Alain __ Do you Yahoo!? Yahoo! Mail SpamGuard - Read only the mail you want. http://antispam.yahoo.com/tools