Bug#47709: Some scripts way, way out of date

1999-10-25 Thread Mike Bilow
On Sun, 24 Oct 1999, Raul Miller wrote: > We're picking nits, so I expect that this will be my last message to > the bug tracking system on this topic. OK. I think it would be wise to keep focused on the fact that most people are going to be installing the "cgi-scripts" package entirely for tuto

Bug#47709: Some scripts way, way out of date

1999-10-24 Thread Mike Bilow
On Sun, 24 Oct 1999, Raul Miller wrote: > What is the advantage of introducing a complex syntax which is not > robust? In my opinion, using Net::SMTP as I outlined is at least as robust as invoking Sendmail directly, and provides several improvements. 1. There is no need to have any mail system

Bug#47709: Some scripts way, way out of date

1999-10-24 Thread Mike Bilow
On Sat, 23 Oct 1999, Raul Miller wrote: > However, I disagree with the thought process which suggests that Net::SMTP > is in any way a replacement for sendmail. The semantics are totally > different (sendmail queues while Net::SMTP does not). I think Net::SMTP should be used in all cases. Wheth

Bug#26611: macunpack reports unknown compression method

1999-10-20 Thread Mike Bilow
Package: macutils Version: 2.0b3-6 Severity: wishlist Any hope of getting someone to update macunpack? -- Mike 16:07:08 colossus:~$ file ARA-991020.bulk ARA-991020.bulk: StuffIt Archive (data) : T! 16:07:14 colossus:~$ macunpack ARA-991020.bulk Unknown compression methods: d 0, skippi

Bug#47708: 'mailto.pl' passes unquoted addres to 'sendmail'

1999-10-18 Thread Mike Bilow
Another related issue worth noting is that the 'mailto.pl' script invokes 'sendmail' with the address provided unquoted on the command line. I am sure there are more of these; it is just a matter of wading through them. -- Mike

Bug#47709: Some scripts way, way out of date

1999-10-18 Thread Mike Bilow
Package: cgi-scripts Version: 1.0.9 Severity: Normal My opinion, for what it may be worth, is that the example programs in 'cgi-scripts' are in several cases so far out of date that they represent what are considered bad practice in modern CGI technique. For example, the 'mailto.pl' script dating

Bug#47708: Serious security holes result from failure to quote variables

1999-10-18 Thread Mike Bilow
Package: cgi-scripts Version: 1.0.9 Severity: grave Several example scripts in the 'cgi-scripts' package pass information supplied by the remote user via unquoted strings. The failure to quote these strings introduces a severe potential vulnerability. Although some web servers may provide some f