RE: security in perl

2001-10-12 Thread Gunther Birznieks
didn't protect their sensitive data. > >Again, sorry for the rather serious tone, but it's a rather serious subject. > >Cheers, >Curtis "Ovid" Poe > >= >Senior Programmer >Onsite! Technology (http://www.onsitetech.com/) >"Ovid" on http://

Re: configuring apache to run cgi -perl on win32 system

2001-10-16 Thread Gunther Birznieks
gt; > > > ## > > > > > > what am I doing wrong? Activestate Perlis installed at > > C:\Perl\bin\perl.exe I think this has something to do with it. But I Ive > > been looking at this config file for the last eight hours and dont know > > a

Re: Using Win32::ODBC

2001-10-09 Thread Gunther Birznieks
e method, which is a godsend for debugging. > >Cheers, >Curtis "Ovid" Poe > >= >Senior Programmer >Onsite! Technology (http://www.onsitetech.com/) >"Ovid" on http://www.perlmonks.org/ > >__________ >Do You Ya

Re: Is this secure

2002-02-13 Thread Gunther Birznieks
>sub readfile { > my $file = shift; > my $rv; > logit("Opening file $file",2); > open( FILE, $file ) || return "Could not find file $file"; > my @lines = ; > close FILE || return "Could not close filehandle"; >

Re: CGI Calendar Script

2002-07-09 Thread Gunther Birznieks
At 08:55 AM 7/10/2002, David T-G wrote: >Roger -- > >...and then Roger Spears said... >% >% Hello, > >Hi! > > >% >% Well for my next project I'm trying to build an interactive calendar >% system using Perl/CGI. > >Neat. I'd be quite interested in the finished product. I've been >searching (fruit

Re: How fatalsToBrowser works ?

2002-08-17 Thread Gunther Birznieks
You might find this link useful... http://perl.apache.org/docs/general/perl_reference/perl_reference.html#Exception_Handling_for_mod_perl Basically, fatalsToBrowser is "OK" to use, but it can be fraught with underlying issues that Matt outlines pretty well in the above URL. Has also given a ta

Re: taint question

2003-01-03 Thread Gunther Birznieks
Reactor wrote: I am fairly new to perl, so this is probably looks like a silly question: I am trying to write text to a file as specified by the query string environment variable. Since the file names are all numbers, I'm using a regex to strip anything other than a digit from the variable, and

Re: portability question...IIS Vs. Apache

2003-04-02 Thread Gunther Birznieks
IIS thinks the CWD is the root directory of the script alias. Just set up a script alias that points to the directory where the cgi actually is and you'll be fine. Peter Kappus wrote: Hey all, Anyone move scripts between IIS and Apache or need to write scripts that work on both? The problem I

Re: PHP vs Perl

2003-07-28 Thread Gunther Birznieks
Octavian, In some respects I believe you are correct. Here are my 2cents... 1) It is really not good to enable mod_perl by default. Doing so would dramatically increase the size of the Apache binary. Enabling all scripts to run through Apache::Registry would break half the scripts that exist o

Re: Is it a security risk to use identical names for database fields and html forms?

2001-08-31 Thread Gunther Birznieks
At 01:55 PM 8/31/2001 -0700, Curtis Poe wrote: >--- "Michael R. Fahey" <[EMAIL PROTECTED]> wrote: > > Hi, > > > > I was looking at a perl script where the developer used different names > > for the incoming parameters and the database field names. He told me > > that this was done for security rea

Re: Win32 Apache and Perl

2001-09-01 Thread Gunther Birznieks
At 03:59 PM 9/1/2001 -0400, Brett W. McCoy wrote: >On Fri, 31 Aug 2001, Shannon Murdoch wrote: > > > Is there any way (I'm sure there is) to make my perl scripts run with the > > standard unix shebang instead? > >Yes, use Unix. :-) So helpful for the Operating System "challenged". :) >If you are

RE: Is it a security risk to use identical names for database fields and html forms?

2001-09-01 Thread Gunther Birznieks
ditional commands, e-mail: [EMAIL PROTECTED] > > > >_ >Do You Yahoo!? >Get your free @yahoo.com address at http://mail.yahoo.com > > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-

RE: active perl on IIS

2001-09-01 Thread Gunther Birznieks
Joel, I could be wrong but based on the way Lynn describes the problem, it does not sound like she has a problem with Perl being installed as the PerlScript examples do work as she stated. Also, she should not have to create a cgi-bin. IIS has a pre-created cgi-bin typically. While I am a fan

Re: Win32 Apache and Perl

2001-09-01 Thread Gunther Birznieks
At 11:16 PM 9/1/2001 -0400, Brett W. McCoy wrote: >On Sun, 2 Sep 2001, Gunther Birznieks wrote: > > > I can't say if this still works but if Apache is doing the interpretation I > > don't see why not. Note that this is an Apache feature -- this won't help > &g

Re: active perl on IIS

2001-09-02 Thread Gunther Birznieks
At 02:59 PM 9/2/2001 -0700, Lynn Glessner wrote: >I haven't had a chance to work on it recently, but I think it will turn out >to be the .cgi extension (I'll have to go back and see who suggested that). >I have my scripts in a directory which was created automatically called >"scripts" a subdirecc

Re: active perl on IIS

2001-09-03 Thread Gunther Birznieks
At 09:07 AM 9/3/2001 -0700, Lynn Glessner wrote: >That did it - thanks :) I am slowly but surely getting this changed over. > >I changed >to >http://198.162.0.1/scripts/sl3.pl"; > >(Obviously if I decided to make this public I would need a different IP or >hopefully a DNS name.) > >I can't believe

Re: Re: active perl on IIS

2001-09-03 Thread Gunther Birznieks
At 08:36 AM 9/3/2001 -0700, Mark Bergeron wrote: >Let me also add, unlike *nix, you may run scripts from virtualy any folder >you see fit on Win (within wwwroot for the web of course). Everything is >really governed by the permissions and etc... you set on the folder >itself. In some cases it m

Re: securing sensitive information in CGI scripts

2001-09-04 Thread Gunther Birznieks
At 10:34 AM 9/4/2001 +, Mel Matsuoka wrote: >At 07:20 PM 09/04/2001 +0100, yahoo wrote: > >Hi all, > >I'd like to find out peoples opinion on the following. > > > >If you have a perl cgi script which accesses a database, are there any > >security issues with having the DBI connection details i

Re: postie (command line mailer for windows)

2001-09-04 Thread Gunther Birznieks
er to use that method in the >future. (I'm avoiding installing any more modules than what were included.) > > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] __ Gunther Birznieks ([EMAIL PROTECTED]) eXtropia - The Open Web Technology Company http://www.eXtropia.com/ -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Extened - Re: securing sensitive information in CGI scripts

2001-09-05 Thread Gunther Birznieks
ding upon the ownership rights (the >actual owner, site admin, site operator, other authorised user). > >Any suggestions for same . > >Thanking in advance. > >Rajeev Rumale > > > > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands,

RE: Is it a security risk to use identical names for database fields and html forms?

2001-09-06 Thread Gunther Birznieks
e open() command in a subtle way yet I think it is not described in perldoc perlsec (it seems mostly focused on tainting and general validation issues). >joel > >-Original Message- >From: Gunther Birznieks [mailto:[EMAIL PROTECTED]] >Sent: 02 September 2001 01:15 >To:

Re: SendMail to lists

2001-09-06 Thread Gunther Birznieks
At 01:48 PM 9/6/2001 -0700, Curtis Poe wrote: >--- randy Peterman <[EMAIL PROTECTED]> wrote: > > >I have to ask: where are you getting the $UserName value? What you are > > trying to do raises some > > >serious security issues if done incorrectly. > > > > I am getting it from a form input. > >R

Re: Script compliation Sequence.

2001-09-06 Thread Gunther Birznieks
At 11:19 AM 9/17/2001 +0800, Rajeev Rumale wrote: >Hello EveryBody > >I needed some advice for all. > >I am working on a untilty which needs to perform server functions. > >I am bit confused with compliation sequency of scripts, when we use "do", >"require" or "use" to include into our scripts. >

Re: Urgent !!! installing Storable.pm

2001-09-06 Thread Gunther Birznieks
e Manager. C:\> ppm PPM> install Storable Blah blah blah about how it is installing storable PPM> quit And voila. Later, Gunther ______ Gunther Birznieks ([EMAIL PROTECTED]) eXtropia - The Open Web Technology Company http://www.eXtropia.

Re: options for the checkbox...?

2001-09-08 Thread Gunther Birznieks
pirits have always encountered violent opposition from mediocre >minds." > >-Albert Einstein > >__ >Do You Yahoo!? >Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger >http://im.yahoo.com

Re: A Framework for Building An WML/HTML Application Using Perl???

2001-09-10 Thread Gunther Birznieks
At 09:30 AM 9/10/2001 -0500, David Simcik wrote: >Hey all, > I'm trying to modify an existing script that searches a test file > for what >one could qualify as normal phonebook style entries; name, phone #, email >addy, etc. We've got an internal presentation coming up in two weeks, and m

Re: Renaming a File

2001-09-10 Thread Gunther Birznieks
> Well, what was your $! when the rename failed? If it was "cross-device > link", > > then you attempted something that you really can't do. > > > > But to say in general that "rename" is perhaps broken is a bit too > > much for me to let stand with n

Re: String to Date conversion

2001-09-10 Thread Gunther Birznieks
At 08:42 PM 9/10/2001 -0400, [EMAIL PROTECTED] wrote: >Hello, >Can some one please suggest me a pointer to do easy date manipulations in >perl. >I have dates as strigs I need to compare 2 dates and may >be sort an array of dates(Strings). > >Thanks >s- Look at the Date modules on CPAN. I quite l

Re: file write problem

2001-09-11 Thread Gunther Birznieks
$name ) { > >die "No value for name"; >} > >else { > > >local *WRITE_COMMENT; > > open ( WRITE_COMMENT, "<<$COMMENT_FILE" ) || die "$COMMENT_FILE : $!"; > flock WRITE_COMMENT, LOCK_EX || die "cannot lock comment fil

Re: editing script

2001-09-13 Thread Gunther Birznieks
At 08:44 AM 9/13/2001 -0300, Wagner wrote: >Hello, > >I'm editing a script that produces a .png image, i want it to turn it into a >.html doc. > >My first doubt is that i can't put the image in the html doc. The image is >stored in $im and i don't know how to put it in the doc. > >ex: >print "Cont

Re: Complete beginner can't get Sendmail to work

2001-09-13 Thread Gunther Birznieks
* > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] __ Gunther Birznieks ([EMAIL PROTECTED]) eXtropia - The Open Web Technology Company http://www.eXtropia.com/ -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Security Suggestions Please!

2001-09-18 Thread Gunther Birznieks
At 12:22 PM 9/18/2001 +0200, Grierson, Garry (UK07) wrote: >I have to secure a newly developed web search service that deals with >sensitive fiscal information, this originally consisted of Perl scripts that >called html pages or other scripts. The default page ran a rudimentary login >script that

Re: setuid question: "insecure dependency"?

2001-09-19 Thread Gunther Birznieks
;-- >-- >Andria Thomas [EMAIL PROTECTED] >System Administrator -- Tovaris, Inc. >(434) 245-5309 x 105 > > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] ___

RE: mod_perl

2001-10-29 Thread Gunther Birznieks
At 12:47 AM 10/30/2001, Bob Showalter wrote: > > -Original Message- > > From: John Griessen [mailto:[EMAIL PROTECTED]] > > Sent: Monday, October 29, 2001 11:39 AM > > To: David Kirol > > Cc: [EMAIL PROTECTED] > > Subject: Re: mod_perl > > > > > > Would one of you give me a little overview

Re: mod_perl and nntp.perl.org

2001-10-30 Thread Gunther Birznieks
At 11:58 AM 10/31/2001, Scott R. Godin wrote: >In article <[EMAIL PROTECTED]>, > [EMAIL PROTECTED] (Ask Bjoern Hansen) wrote: > > > [EMAIL PROTECTED] (Scott R. Godin) writes: > > > > > aside from the mailing lists @apache.org I haven't seen much else, and > > > having a fair preference for a usen

Re: LWP and SSL

2001-10-10 Thread Gunther Birznieks
tion to https sites? > > > >-- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] ______ Gunther Birznieks ([EMAIL PROTECTED]) eXtropia - The Open Web Technology Company http://www.eXtropia.co