Re: Apache::ASP - accessing Session data from Application

1999-10-19 Thread Adi
Yeah, I'd be happy to. I'm not quite done with my app-specific version, but once I get done I'll genericize it and send it along. I'll have to write up some documentation, too. It'll probably be a week or two before I have something worthy of publication. - Adi Joshua Chamas wrote: > > About

Re: Apache::ASP - accessing Session data from Application

1999-10-19 Thread Joshua Chamas
Adi wrote: > > Thanks, Joshua. I tested out your development version 0.17 and it worked > perfect for me. > > One thing I noticed was that if GetSession is improperly used, it could > cause big security holes. By nature it will be used to access someone > else's session, so the application sho

Re: Apache::ASP - accessing Session data from Application

1999-10-19 Thread Adi
Thanks, Joshua. I tested out your development version 0.17 and it worked perfect for me. One thing I noticed was that if GetSession is improperly used, it could cause big security holes. By nature it will be used to access someone else's session, so the application should take care not to send

Re: Apache::ASP - accessing Session data from Application

1999-10-18 Thread Joshua Chamas
Adi wrote: > > I suppose I could do it all through an Application->{SessionID} structure, > but then I wouldn't be using the Session object at all. And I do have some > locking going on, which would make this very unwise. There could be serious > bottleneck if everyone is just using Application

Re: Apache::ASP - accessing Session data from Application

1999-10-18 Thread Adi
Joshua Chamas wrote: > > Do you think there are any advantages to adding a "Get_Session" method to > > $Application that will return a reference to the Session object with a given > > ID? e.g. > > > > Only if you do. Why would you want to do such a thing ? There > may be other ways around your

Re: Apache::ASP - accessing Session data from Application

1999-10-18 Thread Joshua Chamas
Adi wrote: > > Thanks for your help. I guess I was wondering if one could get a reference > to the $Session object directly without needing to add each value to no, you have access to the current $Session, but not to other users' $Sessions. > $Application as it is stored. So to access arbitra

Re: Apache::ASP - accessing Session data from Application

1999-10-18 Thread Adi
Thanks for your help. I guess I was wondering if one could get a reference to the $Session object directly without needing to add each value to $Application as it is stored. So to access arbitrary Session data from Application I need to store it in Application at the same time it's stored in Se

Re: Apache::ASP - accessing Session data from Application

1999-10-18 Thread Joshua Chamas
Adi wrote: > > Is it possible to access data from an arbitrary $Session object from the > $Application object. For example, say for each Session opened, I store the > username in $Session->{'user'}. Can I get a list of all the users currently > connected to the server? What about arbitrary dat