Re: Security in displaying arbitrary HTML

2000-04-27 Thread Steven Champeon
On Thu, 27 Apr 2000, Marc Slemko wrote: Can you be more specific about why you say that? If I set an encrypted, short-lived cookie upon validated authentication, why is that any less secure than any of the other approaches you mentioned? It isn't necessarily any "less secure", but you

Re: Security in displaying arbitrary HTML

2000-04-27 Thread Steven Champeon
On Thu, 27 Apr 2000, Vivek Khera wrote: Why on earth would you take user input and output it verbatim to your pages? Rule number 1 of developing a web site is to never trust the user's input values. *Always* validate it against what you're expecting. I guess someone had better tell the

RE: best way to call traceroute

2000-04-08 Thread Steven Champeon
On Fri, 7 Apr 2000, Karyn Ulriksen wrote: One of the reasons that I always like the nph- construction is that is showed the traceroute 'live' like it would from a console. Last I checked perl doesn't show the traceroute result until the sessions complete which could be a long time if there

Re: best way to call traceroute

2000-04-07 Thread Steven Champeon
On Fri, 7 Apr 2000, Sam Carleton wrote: I want to call traceroute to the remote_host from within a mod_perl script, being a C/C++ programmer I don't the best way to do that. Is there a traceroute object I could use? If so, how? Otherwise how do I run traceroute from within a perl script?

Re: [OT] Standard country codes/names, where to get them?

2000-04-05 Thread Steven Champeon
On Wed, 5 Apr 2000, Vivek Khera wrote: "ELM" == Erich L Markert [EMAIL PROTECTED] writes: ELM I remember being able to download a text file (I think from W3C) that ELM contained a listing of international standard country names and codes Hmmm. I don't recall from where I got it. I

efficiency questions (templates, regexes, db calls)

2000-01-26 Thread Steven Champeon
Hi, gang. I'm working on my first serious mod_perl app, and have a few questions regarding efficiency -- basically looking for traps I may not have internalized after reading the mod_perl_traps page and so forth. I'm developing a site that will use MySQL on the backend to store some info

Re: Another IE5 complaint

1999-11-23 Thread Steven Champeon
On Tue, 23 Nov 1999, Ruben I Safir wrote: LINK REL="SHORTCUT ICON" href="/path/to/favicon.ico" Is this sort of thing implimented in Netscape? Is rev and rel implemented in any fashion? It's not implemented for favicon, no. But LINK REL is supported by Navigator for external CSS

Re: Another IE5 complaint

1999-11-22 Thread Steven Champeon
On Fri, 1 Oct 1999, Joe Pearson wrote: Maybe everyone already knows this, but I just discovered that whenever a IE5 user visits a page in their "Favorites", IE5 also trys to GET favicon.ico from the same site. Therefor I have hundreds of "File does not exist:" errors in my log file. Oh,