Re: Witango-Talk: Server Provided Info: who is loged on? (probably not entirely OT)

Mon, 12 Jun 2006 18:55:38 -0700

Those are environment variables in the CGI specification, NOT the http specification. The comparable httpattribute would be server_port, which is what port the client browser is connecting on.

I don't even know if you can run witango as a cgi anymore, but using CGIs, is VERY slow, unless only small amounts of data pass through that interface. FASTCGI is the much preferred method.

I am not sure what you are looking for, but <@httpattribute SERVER_PORT> IS the port a client's web browser is connecting on. If you are trying to detect ports behind a proxy or firewall or something, it is not possible.

-- 

Robert Garcia
President - BigHead Technology
VP Application Development - eventpix.com
13653 West Park Dr
Magalia, Ca 95954
ph: 530.645.4040 x222 fax: 530.645.4040

On Jun 12, 2006, at 6:41 PM, <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> wrote:


When using Perl/CGI, this information is very simple to collect. The CGI env.var  %ENV provides all info that I need, in this case the variable REMOTE_PORT. 

So I think the information is there and it does not present any security hole (am I wrong?); it is just not provided by Witango.

Thank you,
Mike
[EMAIL PROTECTED]


-----Original Message-----
From: Robert Garcia [HYPERLINK mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]]
Sent: Monday, June 12, 2006 16:58
To: [email protected]
Subject: Re: Witango-Talk: Server Provided Info: who is loged on? (probably not entirely OT)

Its not possible to get info that the client browser doesn't pass to the web server, in any version of witango. Witango gives you access to the entire http header with the FULL_HEADER value of <@httpattribute>. If what you are looking for is not there, you won't be able to get it, and any client that would reveal this information would be blasted for allowing such a security hole.

You would have to write some type of java applet, or activex control, that would require the user to click something that gives you trusted status.

--

Robert Garcia
President - BigHead Technology
VP Application Development - eventpix.com
13653 West Park Dr
Magalia, Ca 95954
ph: 530.645.4040 x222 fax: 530.645.4040
[EMAIL PROTECTED] - [EMAIL PROTECTED]
HYPERLINK http://bighead.net/ http://bighead.net/ - HYPERLINK http://eventpix.com/ http://eventpix.com/

On Jun 12, 2006, at 4:24 PM, <[EMAIL PROTECTED]> 
<[EMAIL PROTECTED]> wrote:

>
>
> -----Original Message-----
> From: Roland Dumas [HYPERLINK mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]]
> Sent: Monday, June 12, 2006 15:13
> To: [email protected]
> Subject: Re: Witango-Talk: Server Provided Info: who is loged on? 
> (probably
> not entirely OT)
>
>
> On Jun 12, 2006, at 2:59 PM, <[EMAIL PROTECTED]> 
> <[EMAIL PROTECTED]>
> wrote:
>
>
>
>       Thank you for your reply.
>
>       What I meant was the client port; in other words if the request
> comes from IP=10.10.10.10:2345 (and then goes to a Webserver on 
> port 80 and
> then to the Witango server), how do I get port=2345 ?
>
>       <@CGIPARAMS> and the new <@HTTPATTRIBUTE> metatags provide the IP
> address of the client, but not the port.
>       In the case of two or more clients from the same NAT/LAN, the
> Witango server obviously knows they are different, based on port 
> value,
> cause there is nothing else to tell them apart (am I wrong?).
>
> by userreference cookie. It's all coming in by port 80 or 443 (SSL)
>
> [Mike]:
> I agree with you, the Webserver port can be 80/443 or anything else 
> that is
> unused.
> But my problem is the client-port-number, which I am trying to get.
> Obviously Witango gets the client-IP address from the Webserver and 
> makes it
> available thru <@CGIPARAMS> or <@HTTPATTRIBUTE>.
> I was wondering if it is a way to get the client-port-address as 
> well (which
> I cannot get otherwise). If not, maybe that would be a nice 
> addition to
> version 6.
>
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.3/361 - Release Date: 
> 6/11/2006
>
> ______________________________________________________________________
> __
> TO UNSUBSCRIBE: Go to HYPERLINK http://www.witango.com/developer/maillist.taf http://www.witangocom/developer/maillist.taf

________________________________________________________________________
TO UNSUBSCRIBE: Go to HYPERLINK http://www.witango.com/developer/maillist.taf http://www.witangocom/developer/maillist.taf

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.3/361 - Release Date: 6/11/2006
 

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.3/361 - Release Date: 6/11/2006
  

________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf


________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf

Reply via email to