-Original Message-
From: Perrin Harkins [mailto:[EMAIL PROTECTED]
Sent: 28 March 2007 17:18
To: Shah, Sagar: IT (LDN)
Cc: modperl@perl.apache.org
Subject: Re: Insecure dependency in eval while running setgid error
On 3/28/07, [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:
Keep
Hi Rob,
Thanks for your response.
-Original Message-
From: Robert Landrum [mailto:[EMAIL PROTECTED]
Sent: 28 March 2007 18:06
To: Perrin Harkins
Cc: Shah, Sagar: IT (LDN); modperl@perl.apache.org
Subject: Re: Insecure dependency in eval while running setgid error
Perrin Harkins
Hi list,
Is there a Apache2::Request module for ActivePerl Win32 (v5.8.8 built for
MSWin32-x86-multi-thread) and mod_perl 2?
I am trying to read parameters from query, the $r-args() call in mod_perl 2
simply returns whole URI rather than key/value hash which mod_perl1 does.
After some research,
You could add:
warn BLOCK: $block\n;
just above the eval, which will log all the blocks that are
being eval
to figure out which one is giving you the trouble.
That's a useful suggestion, I'll give that a try. What I'm
expecting to find is that the $block that
Absolutely. Set up Randy Kobes's PPM repository
(http://theoryx5.uwinnipeg.ca/ppms/ for latest ActivePerl with PPM4
(build 819 and above) or
http://theoryx5.uwinnipeg.ca/cgi-bin/ppmserver?urn:/PPMServer58 for
earlier versions). There's also a binary mod_perl2 there.
Issac
Kelvin Wu wrote:
On Wed, Mar 28, 2007 at 11:46:15AM +0100, Stephane Chazelas wrote:
1. Problem Description:
Hiya,
After querying a mod_perl run CGI, the corresponding apache2
process ends up having its fd 0 and/or fd 1 closed. This then
causes some other CGIs (for instance mod_python's viewvc) to
I tried URI
use URI;
use URI::Escape;
my $uri = URI-new($r-unparsed_uri());
my %args = $uri-query_form();
$r-print($args{key});
it works too.
On 3/29/07, Kelvin Wu [EMAIL PROTECTED] wrote:
Hi list,
Is there a Apache2::Request module for ActivePerl Win32 (v5.8.8 built for
Hi!
I was wondering if someone knows a good hosting provider with mod_perl
support in Europe / Germany / Austria?
I've found this http://perl.apache.org/help/isps.html but this seems
not to be really up2date anymore.
It is very important that the provider has good customer support.
Thanks
On 29 Mar 2007, at 10:46, Denis Banovic wrote:
Hi!
I was wondering if someone knows a good hosting provider with mod_perl
support in Europe / Germany / Austria?
I've found this http://perl.apache.org/help/isps.html but this seems
not to be really up2date anymore.
It is very important that
Hi all,
Software (Apache 2.2.4, mpm prefork / 8 children, mp 2.0.3, Apache::DBI
1.06)
On Apache startup i am loading a module via startup.pl, which establishes
a database (mysql) connection:
[..]
package SomeModule;
..
sub new {
my $this = shift;
my $class = ref($this) || $this;
my
hi
i think more traffic will create problems. as you state, you are going
against an explicit warning in the docs. this is just begging for
trouble.
why not just let Apache::DBI manage the handles for you? that is what it
is written for.
also, i think mysql can handle lots of connections ...
I have CGI script which uses normal DBI mysql calls(DBD, DBI::Mysql), I am
tryint to port it to mod_perl2 and Apache::DBI.
1. Do I still need to use 'use Apache::DBI;' in my script (or in startup.pl) if
I already set 'PerlModule Apache::DBI' in httpd.conf?
2. Will Apache::DBI work (caches and
On Thu, 29 Mar 2007, Issac Goldstand wrote:
Kelvin Wu wrote:
Is there a Apache2::Request module for ActivePerl Win32 (v5.8.8 built
for MSWin32-x86-multi-thread) and mod_perl 2?
Absolutely. Set up Randy Kobes's PPM repository
(http://theoryx5.uwinnipeg.ca/ppms/ for latest ActivePerl with
All, I've now had a chance to look at implementing sub requests and it seems to
be the thing I need but .
I need some more info that I've been unable to get from the book or the web.
To begin with, the environment passed to the sub request has to be managed and
I've half succeeded
Yes just noticed, thanks for your info.
On 3/29/07, Randy Kobes [EMAIL PROTECTED] wrote:
On Thu, 29 Mar 2007, Issac Goldstand wrote:
Kelvin Wu wrote:
Is there a Apache2::Request module for ActivePerl Win32 (v5.8.8 built
for MSWin32-x86-multi-thread) and mod_perl 2?
Absolutely. Set up
Kelvin Wu wrote:
1. Do I still need to use 'use Apache::DBI;' in my script (or in
startup.pl) if I already set 'PerlModule Apache::DBI' in httpd.conf?
you should _never_ use Apache::DBI in your script itself.
1)
httpd.conf
Perl
use Aapche::DBI ();
/Perl
2) httpd.conf
PerlModule Apache::DBI
On Mar 29, 2007, at 7:46 AM, Helmut Zeilinger wrote:
$self-{'dbh'} = DBI-connect (DBI:mysql:somedb:localhost,
root, , {RaiseError = 1});
connecting as root?
While running the server there is only one apache - mysql
connection visible via
mysqladmin processlist and not one connection
On Mar 29, 2007, at 9:27 AM, Kelvin Wu wrote:
1. Do I still need to use 'use Apache::DBI;' in my script (or in
startup.pl) if I already set 'PerlModule Apache::DBI' in httpd.conf?
2. Will Apache::DBI work (caches and manages connections etc) if I
dont change my CGI script DB calls but
I see, i will change my strategy towards
avoiding the conncetion on startup.
Thank you!
Helmut
Jonathan Vanasco schrieb:
On Mar 29, 2007, at 7:46 AM, Helmut Zeilinger wrote:
$self-{'dbh'} = DBI-connect (DBI:mysql:somedb:localhost,
root, , {RaiseError = 1});
connecting as root?
While
The Apache::DBI perldoc is too simple to understand its usage, but I would
like to thank your guys for your great explaination on my questions... :-)
--
Sent from my BlackBerry. Ignore the typos unless they're funny.
I think you can do it on startup just not startup of the parent httpd
process.
What you can do is use a PerlChildInitHandler (the name may have changed
in mod_perl2, sorry I'm too lazy to check).
This is a hook into the part of the httpd lifecycle that gets executed
when the _child_ process
On 3/29/07, Anthony Gardner [EMAIL PROTECTED] wrote:
I can use PassEnv and PerlPassEnv, set them in the calling script and then
retrieve the values in the called script (sub request) cool!!
You could also put things in $r-pnotes(). The parent request object
is available from within
On 3/29/07, Kelvin Wu [EMAIL PROTECTED] wrote:
The Apache::DBI perldoc is too simple to understand its usage
There is more documentation available here:
http://www.modperlbook.org/html/ch20_01.html
- Perrin
Yeah, you know what, I was mistakingly using lookup_file for ages and then
changed to lookup_uri but then overlooked the possibilty of adding on the
qsuery string.
Ho hum, will try tomorrow. Am getting there slowly.
Perrin Harkins [EMAIL PROTECTED] wrote: On 3/29/07, Anthony Gardner wrote:
I
On 3/29/07, Jonathan Vanasco [EMAIL PROTECTED] wrote:
If you need to connect on startup to pull configuration vars:
a- connect before using Apache::DBI - not entirely necessary, but
can avoid edge cases.
b- connect using an alternate connection string 'user=myapp.config'
- not
Hi All,
I'm getting closer to this now...
-Original Message-
From: Shah, Sagar: IT (LDN)
Sent: 29 March 2007 10:07
To: 'Robert Landrum'; 'Perrin Harkins'
Cc: 'modperl@perl.apache.org'
Subject: RE: Insecure dependency in eval while running setgid error
You could add:
[EMAIL PROTECTED] wrote:
Are there any other cases? How does perl handle the special case above,
is there some magical variable $let_regexes_have_the_untaint_power or
something of that order (silly long shot I know)
Sounds like a question for perl5-porters.
I have to say I'm finding it
Hi Michael,
Thanks for your response. Yes, I haven't ruled out the fact their being
a problem with my perl version (5.8.6) itself, I was just weary of going
to p5p too early, I know many people hate cross posts. Perhaps I can
point a link to this thread in archive and ask the perl specific
On Thu, 2007-03-29 at 10:57 -0400, Jonathan Vanasco wrote:
On Mar 29, 2007, at 9:27 AM, Kelvin Wu wrote:
1. Do I still need to use 'use Apache::DBI;' in my script (or in
startup.pl) if I already set 'PerlModule Apache::DBI' in httpd.conf?
Putting it in startup.pl makes sure that memory
[EMAIL PROTECTED] wrote:
I'm hoping tho that if I can create a small test case under mod_perl
then that opens up myself/someone-on-the-list trying it with other
combinations of perl mod_perl.
If you log the pid in the access file, you should be able to determine
the serious of page hits
On Thu, 29 Mar 2007 10:12:00 +0100
Stephane Chazelas [EMAIL PROTECTED] wrote:
On Wed, Mar 28, 2007 at 11:46:15AM +0100, Stephane Chazelas wrote:
1. Problem Description:
Hiya,
After querying a mod_perl run CGI, the corresponding apache2
process ends up having its fd 0 and/or
On Thu, Mar 29, 2007 at 02:49:36PM -0500, Frank Wiles wrote:
On Thu, 29 Mar 2007 10:12:00 +0100
Stephane Chazelas [EMAIL PROTECTED] wrote:
On Wed, Mar 28, 2007 at 11:46:15AM +0100, Stephane Chazelas wrote:
1. Problem Description:
Hiya,
After querying a mod_perl run CGI,
Grr, forgot to Cc the list. :)
-
Frank Wiles [EMAIL PROTECTED]
http://www.wiles.org
-
Begin forwarded message:
Date: Thu, 29 Mar 2007 15:18:51 -0500
From: Frank Wiles [EMAIL PROTECTED]
To: Stephane Chazelas [EMAIL
Cough: http://p6m7g8.net
No issues here.
--
Philip M. Gollucci ([EMAIL PROTECTED]) 323.219.4708
Consultant / http://p6m7g8.net/Resume/resume.shtml
Senior Software Engineer - TicketMaster - http://ticketmaster.com
On Mar 29, 2007, at 1:01 PM, Perrin Harkins wrote:
Apache::DBI handles this for you. It checks if you are connection
during startup and does not make your connection persistent if you
are.
is this new-ish ( like within a year or so ?)
it used to not do that. perhaps by bug not design, but
On 3/29/07, Jonathan Vanasco [EMAIL PROTECTED] wrote:
On Mar 29, 2007, at 1:01 PM, Perrin Harkins wrote:
Apache::DBI handles this for you. It checks if you are connection
during startup and does not make your connection persistent if you
are.
is this new-ish ( like within a year or so ?)
On Thu, Mar 29, 2007 at 01:59:44PM -0700, Philip M. Gollucci wrote:
Cough: http://p6m7g8.net
No issues here.
[...]
Thanks Philip,
I would still run lsof -ac apache2 -d0,1
on that host. You may find that some of the processes have their
fd 1 closed. The problem is not especially with
On Thu, Mar 29, 2007 at 09:06:20PM +0100, Stephane Chazelas wrote:
[...]
print STDOUT ...;
actually did a write(16, ...), so STDOUT was affected another
fd that 1. Tomorrow, I'll try doing a system() within perl, but
I suspect for instance system(echo foo) will no output
anything to the
On Thu, Mar 29, 2007 at 11:01:57PM +0100, Stephane Chazelas wrote:
[...]
COMMAND PID USER FD TYPE DEVICESIZE NODE NAME
[...]
sh 19113 www-data0r CHR 1,3 1673 /dev/null
sh 19113 www-data1w CHR 1,3 1673 /dev/null
sh
Stephane Chazelas wrote:
On Thu, Mar 29, 2007 at 01:59:44PM -0700, Philip M. Gollucci wrote:
Cough: http://p6m7g8.net
No issues here.
[...]
Yes, I know what viewvc is -- its actually running there too.
I'm about to be on vacation (away from computers) and have some stuff to
do first. I'll
On Mar 29, 2007, at 5:42 PM, Perrin Harkins wrote:
it used to not do that. perhaps by bug not design, but I had to get
very aggressive ~2004/2005 to keep connections from caching.
I haven't seen that, but I also haven't used Apache::DBI much on
mod_perl 2. If you can reproduce the problem,
On 3/29/07, Jonathan Vanasco [EMAIL PROTECTED] wrote:
You're one of those people using cache_connect in dbi itself, right ?
Yes, I needed something more customized than what Apache::DBI was
doing. I use DBI-connect_cached and add my own automatic rollback
handler.
- Perrin
This release is a minor release of Apache-SizeLimit, with one small
bugfix.
The main reason this release is coming out is to make the upcoming
mod_perl-1.30
release possible. Enjoy.
file: $CPAN/authors/id/G/GO/GOZER/Apache-SizeLimit-0.91.tar.gz
size: 15957 bytes
md5:
Author: gozer
Date: Thu Mar 29 22:16:50 2007
New Revision: 523943
URL: http://svn.apache.org/viewvc?view=revrev=523943
Log:
prepare for 0.91 release
Modified:
perl/Apache-SizeLimit/trunk/Changes
perl/Apache-SizeLimit/trunk/lib/Apache/SizeLimit.pm
Modified:
Author: gozer
Date: Thu Mar 29 22:17:29 2007
New Revision: 523944
URL: http://svn.apache.org/viewvc?view=revrev=523944
Log:
tag for 0.91 release
Added:
perl/Apache-SizeLimit/tags/0_91/
- copied from r523943, perl/Apache-SizeLimit/trunk/
Author: gozer
Date: Thu Mar 29 22:20:23 2007
New Revision: 523946
URL: http://svn.apache.org/viewvc?view=revrev=523946
Log:
start the 0.92 dev cycle
Modified:
perl/Apache-SizeLimit/trunk/Changes
perl/Apache-SizeLimit/trunk/RELEASE
perl/Apache-SizeLimit/trunk/lib/Apache/SizeLimit.pm
Author: gozer
Date: Thu Mar 29 22:54:56 2007
New Revision: 523951
URL: http://svn.apache.org/viewvc?view=revrev=523951
Log:
Tagging the 1.30 release
Added:
perl/modperl/tags/1_30/
- copied from r523950, perl/modperl/branches/1.x/
Author: gozer
Date: Thu Mar 29 22:56:31 2007
New Revision: 523952
URL: http://svn.apache.org/viewvc?view=revrev=523952
Log:
start 1.31-dev cycle
Modified:
perl/modperl/branches/1.x/Changes
perl/modperl/branches/1.x/RELEASE
perl/modperl/branches/1.x/lib/mod_perl.pm
Modified:
Author: gozer
Date: Thu Mar 29 23:16:17 2007
New Revision: 523955
URL: http://svn.apache.org/viewvc?view=revrev=523955
Log:
fix a few nits
Modified:
perl/modperl/branches/1.x/RELEASE
Modified: perl/modperl/branches/1.x/RELEASE
URL:
49 matches
Mail list logo
