Fw: off topic : frames html question

2002-02-26 Thread Rahul Garg
I also dont know whether its possible or not! any suggestions ! Well, I have a html page which has many hyperlinks. Now each hyperlink at present calls another html page that has two frames(horizontally).Ist frame is same for all links. Now second frame is also same but has many bookmarks. I wa

off topic : frames html question

2002-02-26 Thread Rahul Garg
Well, I have a html page which has many hyperlinks. Now each hyperlink at present calls another html page that has two frames(horizontally).Ist frame is same for all links. Now second frame is also same but has many bookmarks. I want that on clicking difft. hyperlinks they should lead to their

Re: Things that make you go hmmmmmmmm

2002-02-26 Thread eric-perl
On Tue, 26 Feb 2002, Scot Robnett wrote: > What typically causes the following type of error in a CGI? > --- > Use of uninitialized value in concatenation (.) > at D:\inetpub\whatever\census\myscript.cgi line 272. > -

How can I Track the client IP, when a web request is made to my server.

2002-02-26 Thread vijayak
All, I am Just a Beginner in this & I want to know about How to track the client IP, when a web request is made to my server, and pass is to one variable for further use. thanks a lot if you can give some full function to keep in my script. vijay

Re: Very serious security hole in your script

2002-02-26 Thread Tagore Smith
Randal wrote: > > "Rob" == Rob <[EMAIL PROTECTED]> writes: > > Rob> Is there a good tutorial on untainting data received via a cgi script? > > Besides "perldoc perlsec"? > The best way to make sure that you don't pass dangerous data to the shell is to pass no user data to the shell. There

Re: Very serious security hole in your script

2002-02-26 Thread Joshua Hayden
> Is there a good tutorial on untainting data received via a cgi script? If you look at the message right before yours, you'll see a link. http://www.easystreet.com/~ovid/cgi_course/lesson_three/lesson_three.html Best Regards, JOSHUA D. HAYDEN Owner/Operator of www.PinnacleSiteDesign.com -

Re: Very serious security hole in your script

2002-02-26 Thread Randal L. Schwartz
> "Rob" == Rob <[EMAIL PROTECTED]> writes: Rob> Is there a good tutorial on untainting data received via a cgi script? Besides "perldoc perlsec"? -- Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 <[EMAIL PROTECTED]> http://www.stonehenge.com/merlyn/> Perl/Unix

Re: Very serious security hole in your script

2002-02-26 Thread Rob
Is there a good tutorial on untainting data received via a cgi script? On Tue, 26 Feb 2002, Curtis Poe wrote: > --- erotomek <[EMAIL PROTECTED]> wrote: > > ALWAYS USE THE TAINT MODE !!! > > > > Use the -T switch: > > > > #!/usr/bin/perl -wT > > > > and untaint the $file variable: > > > > die

Re: Installing Perl Help

2002-02-26 Thread Elaine -HFB- Ashton
Scott E Svendsen [[EMAIL PROTECTED]] quoth: *> *>I am currently running perl 5.6.0, I am trying to install 5.6.1 with the *>-Dusethreads option enabled. *> *>I have read the install file, and followed it to the letter, except using: *>sh Configure -Dusethreads *> *>Then I answer all the question

Things that make you go hmmmmmmmm

2002-02-26 Thread Scot Robnett
What typically causes the following type of error in a CGI? --- Use of uninitialized value in concatenation (.) at D:\inetpub\whatever\census\myscript.cgi line 272. --- Line

Re: Launching PERL from Email

2002-02-26 Thread Randal L. Schwartz
> "News0002@Viryours" == News0002@Viryours Com <([EMAIL PROTECTED])> writes: News0002@Viryours> I understand how to launch a PERL CGI program from News0002@Viryours> an Internet form, but have an upcoming project in News0002@Viryours> which I'll need to launch a PERL program from an News0002@

Launching PERL from Email

2002-02-26 Thread [EMAIL PROTECTED]
I understand how to launch a PERL CGI program from an Internet form, but have an upcoming project in which I'll need to launch a PERL program from an e-mail sent to it. Basically, what I want to do is design a PERL script which will a) activate whenever a email is sent to it ... b) have that P

Re: Very serious security hole in your script

2002-02-26 Thread Curtis Poe
--- erotomek <[EMAIL PROTECTED]> wrote: > ALWAYS USE THE TAINT MODE !!! > > Use the -T switch: > > #!/usr/bin/perl -wT > > and untaint the $file variable: > > die 'INSECURE $file !!!' if $file =~ /\.\./; > if ($file =~ /^([-\w./]+)$/) { $file = $1 } > else { die 'INSECURE $file !!!' } > > and

browser question

2002-02-26 Thread Josiah Altschuler
Does anyone know why my links that I make using CGI.pm work in Internet Explorer 5.5, but not Netscape Communicator 4.79? I have code that looks like this: print pre a ( { -href => "http://www.ncbi.nlm.nih.gov/htbin-post/Entrez/query?db=n&form=6&uid=$acc&do pt=g" }, "$acc"), ("  $repArrayHa

Re: Very serious security hole in your script

2002-02-26 Thread Carl Franks
Erotomek, As you've changed the subject line, and have not included the original message, could you please explain whose post this is regarding. Quite a lot of code is sent to this mailing list! Thanks, Carl p.s. Please don't cc me, I'm on the list. -- >From: erotomek <[EMAIL PROTECTED]

Re: sql question

2002-02-26 Thread Robert Lubej
Donn wrote: >this question seems to be unrelated to perl but merely sql. > >but i am generating a web page displaying the data >from oracle db, using perl script..i have one problem though >with my SQL.. > >can somebody pls. help me with sql on how >to page the resultset from a select query...

Very serious security hole in your script

2002-02-26 Thread erotomek
Hi, I've just read your message on [EMAIL PROTECTED] mailing list archives: http:[EMAIL PROTECTED]/msg02976.html I just thought you'd like to know that there's an extremely serious security problem, anyone can download every single file from your server! And that's not all, it's also possible to

Installing Perl Help

2002-02-26 Thread Scott E Svendsen
I am currently running perl 5.6.0, I am trying to install 5.6.1 with the -Dusethreads option enabled. I have read the install file, and followed it to the letter, except using: sh Configure -Dusethreads Then I answer all the questions it gives me and says it is installed. Except there is no i