Re: Apache::Session permissions problem

2003-09-15 Thread Perrin Harkins
Eric, Sorry if I came off overly critical. Many people have had problems trying to use Mason with Apache::Session because of that article. This is why on the Mason website the link to that article describes it as outdated and steers people to newer documentation. (It probably should also st

Re: Apache::Session permissions problem

2003-09-15 Thread Eric Schwartz
On Saturday, Sep 13, 2003, at 09:22 America/Denver, Perrin Harkins wrote: I found a pretty useful article at http://www.linuxjournal.com/article.php?sid=4143 on how to use Apache::Session with Mason. I'm afraid that is not a very good article. It's out of date, and shows poor error handling. If

Re: Apache::Session permissions problem

2003-09-15 Thread Enrico Sorcinelli
On Fri, 12 Sep 2003 01:01:24 -0600 Eric Schwartz <[EMAIL PROTECTED]> wrote: Hi Eric, > I found a pretty useful article at > http://www.linuxjournal.com/article.php?sid=4143 on how to use > Apache::Session with Mason. I wrote a tutorial on session management with HTML::Mason and Apache::Sess

RE: Apache::Session permissions problem

2003-09-14 Thread Perrin Harkins
> Is there a, or are there initiatives to keep an 'accurate' document > repository? The field of knowledge is too broad for any one person to maintain, especially since the main people who maintain the site docs are quite busy building mod_perl 2. This is why we count on individuals stepping up a

RE: Apache::Session permissions problem

2003-09-14 Thread Frank Maas
> I'm afraid that is not a very good article. It's out of date, ... > Apache::Session::DBI (which is what the article refers to) is ancient > and should not be used. I stumbled upon this problem quite a few times. Trying to get the hang of using cookies for authentication and sessions there are

Re: Apache::Session permissions problem

2003-09-13 Thread Perrin Harkins
> I found a pretty useful article at > http://www.linuxjournal.com/article.php?sid=4143 on how to use > Apache::Session with Mason. I'm afraid that is not a very good article. It's out of date, and shows poor error handling. If you want to use sessions with Mason, you should be using the session

Re: Apache::Session and pnotes

2003-09-05 Thread Perrin Harkins
Sorry, I missed this message until now... On Tue, 2003-09-02 at 14:21, Xavier Noria wrote: > Let's assume a new user comes to the website. We set up a session for > him and put the session id in a cookie to be sent in the response. As > you know, somewhere in the request cycle of that particular

Re: Apache::Session and pnotes

2003-09-05 Thread Enrico Sorcinelli
On Tue, 2 Sep 2003 20:21:45 +0200 Xavier Noria <[EMAIL PROTECTED]> wrote: > On Tuesday 02 September 2003 07:28, Perrin Harkins wrote: > > > Sorry, I don't understand what you're saying here. What you should > > be doing is fetching the session once, putting it in pnotes, and > > getting it from

Re: Apache::Session and pnotes

2003-09-02 Thread Xavier Noria
On Tuesday 02 September 2003 07:28, Perrin Harkins wrote: > Sorry, I don't understand what you're saying here. What you should > be doing is fetching the session once, putting it in pnotes, and > getting it from pnotes for the rest of the request. I am sorry, I'll try to reword it. Let's assume

Re: Apache::Session and pnotes

2003-09-02 Thread Perrin Harkins
On Tue, 2003-09-02 at 05:02, Xavier Noria wrote: > > Can you tell us more about the problem is? What do you see when you > > take the session hash back out of pnotes? > > I have dumped the hash in a content handler and it seems to be OK. Okay, then what is the problem that you're asking for help

Re: Apache::Session extra record not write to Mysql db.

2003-09-02 Thread Perrin Harkins
On Tue, 2003-09-02 at 00:13, James.Q.L wrote: > --- Perrin Harkins <[EMAIL PROTECTED]> wrote: > > Did you add code of your own to update the time column? > > > > no. Maybe you added the time column as an automatic timestamp column? There is no time column in the schema described in the Apache::

Re: Apache::Session extra record not write to Mysql db.

2003-09-02 Thread Anton Permyakov
> > > $session{'time'} = time();## this updates 'time' record > > > > But it doesn't update the time column in the database unless you hacked > > the Apache::Session code to do that. > > > > now i don't know why the time record gets updated. isn't it suppose to update the one in > a_session

Re: Apache::Session extra record not write to Mysql db.

2003-09-02 Thread James.Q.L
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > James.Q.L wrote: > > before i had three fields in table sessions : a_session,id,time in the DB. > > Did you add code of your own to update the time column? > no. > > and updating table etc from the program was working just fine. however, after i

Re: Apache::Session extra record not write to Mysql db.

2003-09-02 Thread Perrin Harkins
James.Q.L wrote: before i had three fields in table sessions : a_session,id,time in the DB. Did you add code of your own to update the time column? and updating table etc from the program was working just fine. however, after i added one more field (username) to the sessions table through phpmysq

Re: Apache::Session and pnotes

2003-09-02 Thread Xavier Noria
On Tuesday 02 September 2003 07:46, you wrote: (I am sorry I am not replying to the actual email, but to a forwarded copy from my desktop at home.) > > It seems, however, that Apache::Session objects stop being stored > > when I put the session in pnotes() with a code analogous to this: > > Can

Re: Apache::Session and pnotes

2003-09-02 Thread Perrin Harkins
Xavier Noria wrote: It seems, however, that Apache::Session objects stop being stored when I put the session in pnotes() with a code analogous to this: Can you tell us more about the problem is? What do you see when you take the session hash back out of pnotes? my $r = Apache::Request->inst

Re: Apache::Session

2003-08-22 Thread Marcel Greter
All the information that comes from the user-agent can be faked. So the session id is as insecure as any other identifier you get from the Browser. The only thing that could be used is the IP address, and as somebody said earlier, some ISPs and big company LANs may use different proxies for dif

Re: Apache::Session

2003-08-14 Thread Perrin Harkins
On Thursday 14 August 2003 8:06 am, Joelle Nebbe wrote: > What i do is store both the remote IP and the user agent HTTP parameters in > the session when the session is created. Whenever a new request comes in > with that session I check that those havent changed. So, you don't care about AOL users

Re: Apache::Session

2003-08-14 Thread Patrick Galbraith
Strip out stuff that could be problematic. This is what we did with Slash. We strip out javascript or any tag that can be problematic, or be used even to break the layout of the page. It'll make you're life much easier ;) Take this from someone who coded tons of features to ward off trolls! Al

Re: Apache::Session

2003-08-14 Thread Joelle Nebbe
Hi I do a few basic things that improve security - its still not strict security but What i do is store both the remote IP and the user agent HTTP parameters in the session when the session is created. Whenever a new request comes in with that session I check that those havent changed. If they h

Re: Apache::Session

2003-08-14 Thread Raf
Aleksandr Guidrevitch said: ... > Is it possible to uniquely identify the user by some attributes ? > The only thing I consider now is IP, but what about proxies and NATs ? > User Agent string could also be stolen via javascript. That means I tend > to make stolen session ids non-reusable. Went t

Re: Apache::Session

2003-08-14 Thread Aleksandr Guidrevitch
Hi, All What have you used to stip out that stuff ? I've reviewied HTML::StripScripts, but it seems to be very slow. I've also considered HTML::Filter to do that but I'm also affraid that HTML::Parser is not the fastest thing on the earth, even though it will be invoked once during initial submi

Re: Apache::Session

2003-08-14 Thread Patrick Galbraith
Aleksandr, we had our own stripping methods. Just get the source for slashcode http://slashcode.com and look for Slash/Display/Display.pm: strip_paramattr => \&strip_paramattr, Slash/Display/Display.pm: strip_urlattr => \&strip_urlattr, Slash/Display/Display.pm: strip_anchor

Re: Apache::Session

2003-08-14 Thread O'K Web Design
Hi I might be missing the point but if you already are tracking with Apache::Session why not encrypt the session id before giving it to the user in the first place. You could store a public 'key' for the encryption in a cookie on the users machine. That way only that user can give you the r

Re: Apache::Session::Lock::File hangs under Windows

2003-07-08 Thread Enrico Sorcinelli
On Tue, 8 Jul 2003 10:26:54 +0400 "Andrew Alakozow" <[EMAIL PROTECTED]> wrote: Hi Andrew > > BTW, 'clean' method of this model hangs as well. > Also Apache::Session::Lock::File (1.54) 'clean' method has a little bug in checking lockfiles last access time. See my post at: http://math

Re: Apache::Session::Lock::File hangs under Windows

2003-07-07 Thread Andrew Alakozow
PH> On Mon, 2003-07-07 at 07:29, Andrew Alakozow wrote: >> Apache::Session::Lock::File hangs under Windows if you try to remove >> session or add data to existing session. This happenes because you >> cannot "flock($self->{fh}, LOCK_EX)" if you already has >> "flock($self->{fh}, LOCK_SH)" in Wind

Re: Apache::Session::Lock::File hangs under Windows

2003-07-07 Thread Perrin Harkins
On Mon, 2003-07-07 at 07:29, Andrew Alakozow wrote: > Apache::Session::Lock::File hangs under Windows if you try to remove > session or add data to existing session. This happenes because you cannot > "flock($self->{fh}, > LOCK_EX)" if you already has "flock($self->{fh}, LOCK_SH)" in Windows. Unde

RE: Apache::Session and Postgres

2003-02-25 Thread Grant McLean
Perrin Harkins wrote: > On Mon, 2003-02-24 at 07:09, Grant McLean wrote: > > I get this error: > > > > Can't locate object method "get_lock_manager" via package > > "Apache::Session::Postgres" > > > > And indeed, that method does not seem to be defined in any > > of the modules which Apache:

Re: Apache::Session and Postgres

2003-02-24 Thread Perrin Harkins
On Mon, 2003-02-24 at 07:09, Grant McLean wrote: > I get this error: > > Can't locate object method "get_lock_manager" via package > "Apache::Session::Postgres" > > And indeed, that method does not seem to be defined in any of the modules > which Apache::Session::Postgres inherits from. I do

Re: Apache::Session::File hangs

2003-01-19 Thread Perrin Harkins
Axel Huizinga wrote: The following code hangs after reloading and the try to tie again the previously created session! WHY? ... use vars qw( $id $sID $lockDir %session $sessionDir ); The session variable has to go out of scope for the lock to be released. I know i

Re: Apache::Session

2003-01-16 Thread Randy Kobes
On Thu, 16 Jan 2003, Carl Holm wrote: > Hello, > > I am looking for a PPM version of Apache::Session for Perl (v5.8.0 > built for MSWin32-x86-multi-thread) > and Apache/2.0.43. Any pointers would be greatly appreciated. > > Thanks, > > Carl Holm > [EMAIL PROTECTED] I just put one up under ht

RE: Apache::Session

2003-01-16 Thread Wilson, Allen
Carl Have you check the active perl site (http://www.activeperl.com) ? It may be available there -Original Message- From: Carl Holm [mailto:[EMAIL PROTECTED]] Sent: Thu 1/16/2003 9:12 PM To: [EMAIL PROTECTED] Cc: Subject: Apache::

Re: Apache::Session::MySQL

2002-12-28 Thread Richard
ECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, December 28, 2002 2:32 PM Subject: Re: Apache::Session::MySQL > > So by user nobody, you mean in the httpd.conf file in the > tags the user and group? > > > > I have it set to user username and group username for each account,

Re: Apache::Session::MySQL

2002-12-28 Thread Perrin Harkins
> So by user nobody, you mean in the httpd.conf file in the tags the user and group? > > I have it set to user username and group username for each account, > since all of our boxes use SuExec. Okay, that may be an issue because SuExec does not work with mod_perl. Each apache daemon can only run

Re: Apache::Session::MySQL

2002-12-28 Thread George Valpak
At 01:25 PM 12/28/2002 -0600, Richard wrote: >So mod_perl is safe Ok. one other question. If I do upgrade to Mod_Perl, >can I still run regular Perl scripts, without using Mod_Perl, or do I have >to use one or the other, only. Richard, Yes,you can still run regular cgi, as with MP you have t

Re: Apache::Session::MySQL

2002-12-28 Thread Richard
So by user nobody, you mean in the httpd.conf file in the I just replied to the PerlMonks reply you did. Thank you. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, December 28, 2002 12:08 PM Subject: R

Re: Apache::Session::MySQL

2002-12-28 Thread perrin
> Ah. ok. I don't use Mod_Perl, I hear it is a big security risk, since > it runs as root. Is this true? It's not true. The parent process runs as root in order to open port 80, but that's the same for CGI as well. The child processes that actually handle requests runs as whatever user you speci

Re: Apache::Session::MySQL

2002-12-28 Thread Richard
your reply in a min. Thank you!) - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, December 28, 2002 11:49 AM Subject: Re: Apache::Session::MySQL > > Is this the correct list for help with Apache::Session

Re: Apache::Session::MySQL

2002-12-28 Thread perrin
> Is this the correct list for help with Apache::Session::MySQL? This is a good list for it if you are using mod_perl. If you're using CGI, try one of the CGI resources instead, or stick with perlmonks.org. I just replied to your post there a few minutes ago. - Perrin

Re: Apache::Session and user sessions

2002-12-09 Thread Perrin Harkins
Rafiq Ismail (ADMIN) wrote: I'm not sure how often a user will attempt to complete one form through multiple browsers. To be honest I'm not sure that he/she should. There are all kind of forms. An obvious example would be a search. Users often open up multiple windows when browsing a site and

Re: Apache::Session and user sessions

2002-12-09 Thread Rafiq Ismail (ADMIN)
On Mon, 9 Dec 2002, Perrin Harkins wrote: > md wrote: > > My question is with regards to whether I need or > > should put the submitted data into the session as the > > user navigates the forms (to create an account). The > > user will be taken through three forms to create an > > account. So for

Re: Apache::Session and user sessions

2002-12-09 Thread Perrin Harkins
md wrote: My question is with regards to whether I need or should put the submitted data into the session as the user navigates the forms (to create an account). The user will be taken through three forms to create an account. So for instance, form one will ask the user to create a username, passw

Re: Apache::Session and user sessions

2002-12-07 Thread md
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > Todd W wrote: > > I have a table with some basic user information > (first name, last name, > > address, > > phone number, etc...). > > That's permanent data, not session data. Session > data is transient. I was reading through the archives and

Re: Apache::Session and user sessions

2002-09-23 Thread Todd W
> >It's just a storage mechanism. Typically the procedure is that one a user >identified herself with some kind of login process, you put her user ID (a >primary key to a database table) into the session, and keep it as a key for >accessing that data. > >>I have a table with some basic user in

Re: Apache::Session and user sessions

2002-09-22 Thread Perrin Harkins
Todd W wrote: > Im looking at Apache::Session and trying to figure out what it does. It provides shared storage of a hash of data, and gives you a unique ID that you can tie to a user. > From what I > can tell, Apache::Session will only give generic sessions, of which I know > nothing about the

Re: Apache::Session - What goes in session?

2002-08-21 Thread Perrin Harkins
Peter J. Schoenster wrote: > If I'm using Apache::DBI so I have a persistent connection to MySQL, > would it not be faster to simply use a table in MySQL? Probably not, if the MySQL server is on a separate machine. If it's on the same machine, it would be close. Remember, MySQL has more work

Re: Apache::Session - What goes in session?

2002-08-21 Thread Perrin Harkins
Ask Bjoern Hansen wrote: > The performance? I don't remember the exact figure, but it was at > least several times faster than the BerkeleyDB system. And *much* > simpler. In my benchmarks, recent versions of BerkeleyDB, used with the BerkeleyDB module and allowed to manage their own locking,

RE: Apache::Session - What goes in session?

2002-08-21 Thread Jesse Erlbaum
Hey James -- > >One way to think about it is this: MySQL stores its data in > files. There > >are many layers of code between DBI and those files, each of which add > >processing time. Going directly to files is far less code, and > less code is > >most often faster code. > > MySQL also stores

Re: Apache::Session - What goes in session?

2002-08-21 Thread James G Smith
"Jesse Erlbaum" <[EMAIL PROTECTED]> wrote: >Hi Peter -- > >> > The morale of the story: Flat files rock! ;-) >> >> If I'm using Apache::DBI so I have a persistent connection to MySQL, >> would it not be faster to simply use a table in MySQL? > > >Unlikely. Even with cached database connections

RE: Apache::Session - What goes in session?

2002-08-21 Thread Jesse Erlbaum
Hi Peter -- > > The morale of the story: Flat files rock! ;-) > > If I'm using Apache::DBI so I have a persistent connection to MySQL, > would it not be faster to simply use a table in MySQL? Unlikely. Even with cached database connections you are probably not going to beat the performance o

Re: Apache::Session - What goes in session?

2002-08-21 Thread Peter J. Schoenster
On 21 Aug 2002 at 2:09, Ask Bjoern Hansen wrote: > Now using good old Fcntl to control access to simple "flat files". > (Data serialized with pack("N*", ...); I don't think anything beats > "pack" and "unpack" for serializing data). > > The expiration went into the data and purging the cache wa

Re: Apache::Session - What goes in session?

2002-08-21 Thread Ask Bjoern Hansen
On Tue, 20 Aug 2002 [EMAIL PROTECTED] wrote: > We are investigating using IPC rather then a file based > structure but its purely investigation at this point. > > What are the speed diffs between an IPC cache and a > Berkely DB cache. My gut instinct always screams 'Stay Off > The Disk' but my gu

Re: Apache::Session - What goes in session?

2002-08-20 Thread Ian Struble
Not in the MS house that I am living in right now :^( On Tue, 20 Aug 2002, Perrin Harkins wrote: > Ian Struble wrote: > > And just to throw one more wrench into the works. You could load up only > > the most popular data at startup and let the rest of the data get loaded > > on a cache miss.

Re: Apache::Session - What goes in session?

2002-08-20 Thread Perrin Harkins
Jie Gao wrote: > There are cases in which it is desirable to expire an entry which > hasn't been used for a certain period of time; authenticated sessions > data, for example. Okay, so you're looking for a session module rather than a cache. Apache::Session doesn't handle expiration, but you cou

Re: Apache::Session - What goes in session?

2002-08-20 Thread Jie Gao
On Tue, 20 Aug 2002, Perrin Harkins wrote: > Jie Gao wrote: > > I wish some of these modules would be able to "touch" cached data so that > > it would expire cache entries on "last-accessed" rather than on the time > > the entries were created. > > Why? People used to do that with cached beca

Re: Apache::Session - What goes in session?

2002-08-20 Thread Perrin Harkins
Jie Gao wrote: > I wish some of these modules would be able to "touch" cached data so that > it would expire cache entries on "last-accessed" rather than on the time > the entries were created. Why? People used to do that with cached because they had limited space and wanted to purge the cach

Re: Apache::Session - What goes in session?

2002-08-20 Thread Jie Gao
On Tue, 20 Aug 2002, Perrin Harkins wrote: > Date: Tue, 20 Aug 2002 13:12:29 -0400 > From: Perrin Harkins <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Cc: Dave Rolsky <[EMAIL PROTECTED]>, [EMAIL PROTECTED] > Subject: Re: Apache::Session - What goes in session?

Re: Apache::Session - What goes in session?

2002-08-20 Thread Perrin Harkins
Ian Struble wrote: > And just to throw one more wrench into the works. You could load up only > the most popular data at startup and let the rest of the data get loaded > on a cache miss. > > That is one technique that we have used for some customer session > servers. It allowed each server t

Re: Apache::Session - What goes in session?

2002-08-20 Thread Ian Struble
; > > > > > > ><[EMAIL PROTECTED]> > >08/20/2002 10:54 AM > > > > > > To: Tony Bowden <[EMAIL PROTECTED]>, md > ><[EMAIL PROTECTED]> > > cc: Perrin Harkins <[EMAIL PROTECTED]>, > >[EMAI

Re: Apache::Session - What goes in session?

2002-08-20 Thread siberian
t;[EMAIL PROTECTED]> > cc: Perrin Harkins <[EMAIL PROTECTED]>, >[EMAIL PROTECTED] > Subject:Re: Apache::Session - What goes >in session? > > >We do see some slowdown on our langauge translation db >calls since they are so intensive. Moving to a &

Re: Apache::Session - What goes in session?

2002-08-20 Thread jjore
at's how I understand the theory to work anyway. Josh <[EMAIL PROTECTED]> 08/20/2002 10:54 AM To: Tony Bowden <[EMAIL PROTECTED]>, md <[EMAIL PROTECTED]> cc: Perrin Harkins <[EMAIL PROTECTED]>, [EMAIL PROTECTED] Subject:Re: Apach

Re: Apache::Session - What goes in session?

2002-08-20 Thread siberian
Thanks, you just saved us a ton of time. Off to change course ;) J On Tue, 20 Aug 2002 13:12:29 -0400 Perrin Harkins <[EMAIL PROTECTED]> wrote: >[EMAIL PROTECTED] wrote: >>We are investigating using IPC rather then a file based >>structure but >>its purely investigation at this point. >> >>

Re: Apache::Session - What goes in session?

2002-08-20 Thread Perrin Harkins
[EMAIL PROTECTED] wrote: > We are investigating using IPC rather then a file based structure but > its purely investigation at this point. > > What are the speed diffs between an IPC cache and a Berkely DB cache. My > gut instinct always screams 'Stay Off The Disk' but my gut is not always > r

Re: Apache::Session - What goes in session?

2002-08-20 Thread md
Thanks...you've given me plenty to work with. Great explination. This is good pragmatic stuff to know! __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com

Re: Apache::Session - What goes in session?

2002-08-20 Thread Perrin Harkins
md wrote: > I haven't looked at the cache modules docs yet...would > it be possible to build cache on the separate > load-balanced machines as we go along...as we do with > template caching? Of course. However, if a user is sent to a random machine each time you won't be able to cache anything

Re: Apache::Session - What goes in session?

2002-08-20 Thread siberian
We are investigating using IPC rather then a file based structure but its purely investigation at this point. What are the speed diffs between an IPC cache and a Berkely DB cache. My gut instinct always screams 'Stay Off The Disk' but my gut is not always right.. Ok, rarely right.. ;) John-

Re: Apache::Session - What goes in session?

2002-08-20 Thread Dave Rolsky
On Tue, 20 Aug 2002 [EMAIL PROTECTED] wrote: > Currently we are working on a 'per machine' cache so all > children can benefit for each childs initial database read > of the translated string, the differential between > children is annoying in the 'per child cache' strategy. Sounds like you want

Re: Apache::Session - What goes in session?

2002-08-20 Thread siberian
We do see some slowdown on our langauge translation db calls since they are so intensive. Moving to a 'per child' cache for each string as it came out of the db sped page loads up from 4.5 seconds to .6-1.0 seconds per page which is significant. Currently we are working on a 'per machine' cac

Re: Apache::Session - What goes in session?

2002-08-20 Thread Tony Bowden
On Mon, Aug 19, 2002 at 06:54:01PM -0700, md wrote: > I can definitely get it all from the db, but that doesn't > seem very efficient. Don't worry about whether it *seems* efficient. Do it right, and then worry about how to speed that up - if, and only if, it's too slow. Premature optimisation i

Re: Apache::Session - What goes in session?

2002-08-20 Thread md
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > There are a few ways to deal with this. The > simplest is to use the > "sticky" load-balancing feature that many > load-balancers have. Failing > that, you can store to a network file system like > NFS or CIFS, or use a > database. (There are

Re: Apache::Session - What goes in session?

2002-08-19 Thread Perrin Harkins
md wrote: >We are using a load-balanced >system; I shoudl have mentioned that earlier. Won't >that be an issue with caching to disk? Is it possible >to cache to the db? > There are a few ways to deal with this. The simplest is to use the "sticky" load-balancing feature that many load-balancers

Re: Apache::Session - What goes in session?

2002-08-19 Thread md
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > >Current page name and id are never stored in db, so > >different browser windows can be on different > >pages... > > > > I thought your session was all stored in MySQL. Why > are you putting > these in the session exactly? If these things are

Re: Apache::Session - What goes in session?

2002-08-19 Thread Perrin Harkins
md wrote: >I don't think "global" was the term I should have >used. What I mean is data that will be seen on all or >most pages by the same user...like "Hello Jim" > Okay, don't put that in the session. It belongs in a cache. The session is for transient state information, that you don't want

Re: Apache::Session - What goes in session?

2002-08-19 Thread md
--- Perrin Harkins <[EMAIL PROTECTED]> wrote: > md wrote: > That doesn't sound very global to me. What happens > when users open > multiple browser windows on your site? Doesn't it > screw up the "current > page" data? I don't think "global" was the term I should have used. What I mean is d

RE: Apache::Session - What goes in session?

2002-08-19 Thread Narins, Josh
Thanks though. That was succinctly put. Could you go back in time and tell me that a year or two ago? That would be great, thanks again. -Josh :) > Things like the login status of this session, > and the user ID that is associated with it go > in the session. Status of a particular page >

Re: Apache::Session - What goes in session?

2002-08-19 Thread Perrin Harkins
md wrote: > Currently I'm putting very little in the session Good. You should put in as little as possible. > what I am putting in the session is more "global" in > nature...greeting, current page number, current page > name... That doesn't sound very global to me. What happens when users ope

RE: Apache::Session - What goes in session?

2002-08-19 Thread Jesse Erlbaum
Hello md -- > I'm using mod_perl and Apache::Session on an app that > is similar to MyYahoo. I found a few bits of info from > a previous thread, but I'm curious as to what type of > information should go in the session and what should > come from the database. One thing to watch out for is the

Re: Apache::Session HELP!

2002-08-09 Thread JPifer
Your provided code looks accurate. Given that you get no errors trying to place the session ID in the first place, it implies that the $sessionID you are passing in your fetchSession routine is either not being passed, being passed incorrectly or the object does not, in fact, live in the d

Re: Apache::Session HELP!

2002-08-09 Thread Fran Fabrizio
Wait, ignore that - I was getting my Apache::Session and my Apache::AuthCookie signals crossed. Sorry. -Fran Fran Fabrizio wrote: > > What does your config file look like? All pointing at the right > tables and fields and such? > > -Fran > > Rafiq Ismail (ADMIN) wrote: > >> Hi, I'm in maj

Re: Apache::Session HELP!

2002-08-09 Thread Fran Fabrizio
What does your config file look like? All pointing at the right tables and fields and such? -Fran Rafiq Ismail (ADMIN) wrote: >Hi, I'm in major poop. > >Got a presentation soon and my just implemented, implementation of >Apache::Session is not working as per the man page. > >I've set commit

Re: 'Apache::Session' using REMOTE_USER as key

2002-05-31 Thread Brian Parker
Perrin Harkins wrote: > Brian Parker wrote: > > I'm trying to use Apache::Session::MySQL. Since I'm generating my own > > session key outside of Apache::Session (using $ENV{REMOTE_USER}), what > > method(s) do I have to override to prevent Apache::Session from trying > > to create a session ke

Re: 'Apache::Session' using REMOTE_USER as key

2002-05-31 Thread Perrin Harkins
Brian Parker wrote: > I'm trying to use Apache::Session::MySQL. Since I'm generating my own > session key outside of Apache::Session (using $ENV{REMOTE_USER}), what > method(s) do I have to override to prevent Apache::Session from trying > to create a session key for me? Since I'm not using Apac

Re: Apache::Session

2002-05-09 Thread Perrin Harkins
Stathy G. Touloumis wrote: >>You need to do some more debugging. Problems with Apache::Session are >>usually due to scoping, so put in some debug statements to see that the >>session objects for the IDs having trouble are getting properly cleaned >>up (i.e. DESTROY is getting called). It is p

RE: Apache::Session

2002-05-09 Thread Stathy G. Touloumis
> You need to do some more debugging. Problems with Apache::Session are > usually due to scoping, so put in some debug statements to see that the > session objects for the IDs having trouble are getting properly cleaned > up (i.e. DESTROY is getting called). It is possible to have problems >

RE: Apache::Session

2002-05-09 Thread Stathy G. Touloumis
> You need to do some more debugging. Problems with Apache::Session are > usually due to scoping, so put in some debug statements to see that the > session objects for the IDs having trouble are getting properly cleaned > up (i.e. DESTROY is getting called). It is possible to have problems > wit

Re: Apache::Session suggested mod

2002-04-10 Thread siberian
I once did a one-off mod of Apache::Session to do just this but eventually gave up and just changed my table names. It was to hard to keep in sync with new releases of Apache::Session and I don't have enough faith in my ability to send a real patch :) So I think its a natural path. When you c

Re: Apache::Session suggested mod

2002-04-10 Thread James G Smith
"Vuillemot, Ward W" <[EMAIL PROTECTED]> wrote: >Has anyone ever thought to have the table name modifiable? E.g. instead of >'sessions', you could set it to something like 'preferences' for a given >instance. I wanted to maintain session information, but also preferences >that are attached to a g

RE: Apache::Session

2002-03-26 Thread Stathy G. Touloumis
Thanks for responding . . . Not sure what else you need. Destroying session objects? Do you mean to untie the session $obj? This is done at the end of each request via untie ( untie(%$obj) ). I have noticed behavior where when attempting to delete a session object ( tied(%$obj)->delete ) I ge

Re: Apache::Session

2002-03-26 Thread Jeffrey W. Baker
On Mon, 2002-03-25 at 15:44, Stathy G. Touloumis wrote: > Has anyone ran into issues with data being written to the data source using > Apache::Session::Store::DB_File and Apache::Session::Lock::File? We are > running into a unique instance where a value is not being saved to the > session store

Re: Apache::Session problem with DBD::Oracle

2002-03-11 Thread Brian Lavender
The tests were writing to an NFS mounted directory, and I think NFS was creating some lock files which prevented the directory from being written to. I moved the install to a non NFS mounted area, and it all worked. brian On Mon, Mar 11, 2002 at 12:00:47PM -0800, Brian Lavender wrote: > Yup, tha

Re: Apache::Session problem with DBD::Oracle

2002-03-11 Thread Brian Lavender
Yup, that fixed it. I have another problem with the File portion. Seems that the test giving the following fail statements. I checked /tmp and there is a lock file. I am not sure about how File::Store all works, and I couldn't quite understand the test file either. Should I just $ make install

Re: Apache::Session problem with DBD::Oracle

2002-03-11 Thread Ken Y. Clark
On Mon, 11 Mar 2002, Brian Lavender wrote: > Date: Mon, 11 Mar 2002 11:24:35 -0800 > From: Brian Lavender <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Apache::Session problem with DBD::Oracle > > I am trying to install Apache::Session and it is failing on > the DBD::Oracle tests. It is

Re: Apache::Session problem with DBD::Oracle

2002-03-11 Thread Geoffrey Young
Brian Lavender wrote: > > I am trying to install Apache::Session and it is failing on > the DBD::Oracle tests. It is asking for a default user. Do > I need to configure Oracle for a default user? Or do I need > to set some environment variable with a user id and password? well, looking at t/99or

Re: Apache::Session problems

2002-02-28 Thread Adam Worrall
> "CW" == Chris Winters <[EMAIL PROTECTED]> writes: > On Thu, 2002-02-28 at 06:16, Domien Bakker wrote: >> >> [Thu Feb 28 11:46:39 2002] [error] Storable binary image v24.48 >> more recent than I am (v2.4) at blib/lib/Storable.pm (autosplit >> into blib/lib/auto/Storable/

Re: Apache::Session problems

2002-02-28 Thread Chris Winters
On Thu, 2002-02-28 at 06:16, Domien Bakker wrote: > Hello, > > I am trying to use Apache::Session to store http session information. > The version number of Apache::Session is 1.54. It is running on > Apache/1.3.20 (Unix) mod_perl/1.26 configured. > ... > Both methods resolve to the same error:

Re: Apache::Session

2002-02-26 Thread Jon Robison
As an add-on to this, does anyone know if one could use MySQL HEAP (memory resident) tables for the session table? --Jon Robison Rob Bloodgood wrote: > > > I am using Apache::Session with Postgresql. Unfortunately I had > > never worked with a huge amount of data before I started to program > >

RE: Apache::Session

2002-02-25 Thread Rob Bloodgood
> I am using Apache::Session with Postgresql. Unfortunately I had > never worked with a huge amount of data before I started to program > something like a (little) web application. I happily packed > everything in the "session"(s-table) that might be of any use. It > hit me hard that it takes a ve

Re: Apache::Session

2002-02-24 Thread Milo Hyson
On Sunday 24 February 2002 02:43 am, Christoph Lange wrote: > > The session hash is serialized/deserialized in its entirety using the > > Storable module. > > Does this mean, that - after tying the session hash - it is of no > importance (concerning the amount of time needed) whether I do > %every

Re: Apache::Session

2002-02-24 Thread Jeffrey W. Baker
On Sun, 2002-02-24 at 02:43, Christoph Lange wrote: > Hi Milo, > > thanks for your answer. I hope you will excuse, but I am not sure > whether I got you right. > > The session hash is serialized/deserialized in its entirety using the > > Storable module. > Does this mean, that - after tying the s

Re: Apache::Session

2002-02-24 Thread Christoph Lange
Hi Milo, thanks for your answer. I hope you will excuse, but I am not sure whether I got you right. > The session hash is serialized/deserialized in its entirety using the > Storable module. Does this mean, that - after tying the session hash - it is of no importance (concerning the amount of tim

  1   2   3   >