Re: setuid question: "insecure dependency"?

2001-09-19 Thread Gunther Birznieks
The problem isn't setuid Perl it's that suid forces taintmode on. Read all available docs on taintmode. In particular start with Lincoln Stein's Web security FAQ at the www.w3c.org website... and re-read perldoc perlsec as you've stated you've done, but this time pay attention to the taintmode

Volunteer Project

2001-09-19 Thread Teresa Raymond
Is anyone interested in doing a volunteer project for www.selfhelpmagazine.com with me? This is a project that involves a SQL database which I have zero experience with but have bought the Programming the Perl DBI book. --- - Teresa Raymond - - [EMAI

setuid question: "insecure dependency"?

2001-09-19 Thread Andria Thomas
Hi all -- I'm trying to write a setuid script to change passwords on a machine via the web. I am not trying to change the local passwords (i.e. *not* modifying /etc/password), but I do need the script to be run as root so it can call another password-changing utility which is doing the actual wo

Re: Security Suggestions Please!

2001-09-19 Thread Sawsan Sarandah
If you want your usernames and passwords to look something like this. ªaRtW¢³†Ê¬Ì~“µv$¾ïà then store passwords in a mysql blob field with the encrypt() function and a "key". I learned this technique from a very excellent tutorial by Aaron Weiss at the following URL: www.wdvl.com/Authoring/

Re: Pls help me 2 troubleshoot

2001-09-19 Thread Roger C Haslock
Assuming the web page returns 'av', 'yh' or 'gg' as values for searchengine, you probably want to write %se = { "av" => "AltaVista", "yh" => "Yahoo", "gg" => "Google"}; $searchengine = $q-> param('searchengine'); $search = new WWW::Search ($se{$searchengine }); I can'

Re: Pls help me 2 troubleshoot

2001-09-19 Thread Sunthari
> When you write > > > $searchengine = $q-> > param("$se{searchengine}"); > %se = { "av" => "AltaVista", > "yh" => "Yahoo", > "gg" => "Google"}; > > > ... why do you define %se after you have used it, > instead of before? Why do > you redefine it on every ca

Re: Pls help me 2 troubleshoot

2001-09-19 Thread Roger C Haslock
When you write $searchengine = $q-> param("$se{searchengine}"); %se = { "av" => "AltaVista", "yh" => "Yahoo", "gg" => "Google"}; ... why do you define %se after you have used it, instead of before? Why do you redefine it on every call to the subroutine? Why

Pls help me 2 troubleshoot

2001-09-19 Thread Sunthari
Dear List, I'm quite a beginner to Perl (it's going to be almost 2 mths).I've written the following codes and I can't seem to get the correct output where user's can choose their search engine for search. Pls correct me since I'm really lost. Secondly, I want to use the HTML::TreeBuilder to read