Re: protecting internal redirects

2010-03-18 Thread Michael A. Capone
Both very good points! I stand corrected. Michael Peters wrote: On 03/18/2010 06:05 PM, Michael A. Capone wrote: This would be the most secure way. Saying it's the *most* secure way is a little stretch. It's *another* secure way. Also, keeping a large Perl/CGI process alive just to serve a

Re: protecting internal redirects

2010-03-18 Thread Michael Peters
On 03/18/2010 06:05 PM, Michael A. Capone wrote: This would be the most secure way. Saying it's the *most* secure way is a little stretch. It's *another* secure way. Also, keeping a large Perl/CGI process alive just to serve a static file is a waste. In fact, if you can think of a mod_rewrite

Re: protecting internal redirects

2010-03-18 Thread Michael A. Capone
Rather than doing the URL redirect, why not just keep the cached results in a private directory, and let the CGI open them and serve them up directly? This would be the most secure way. So, you could do something like this: #

Re: protecting internal redirects

2010-03-18 Thread Michael Peters
On 03/18/2010 04:59 PM, E R wrote: My question is: can the url which points to the cached results be protected so that it cannot be directly accessed by external clients? You should be able to do something like this for that block (so you might have to put that URL inside of a separate blo

protecting internal redirects

2010-03-18 Thread E R
Hi all, This is not exactly a mod_perl question - in fact I hope there is a solution which does not use mod_perl. I have a CGI script which generates a lot of output. Because it takes a lot of time to the output, the results are cached in case the same request is made again. To serve the file th

Re: mod_perl memory

2010-03-18 Thread Pavel Georgiev
Thanks, that did the job. I'm currently testing for side effects but it all looks good so far. On Mar 18, 2010, at 4:09 AM, Torsten Förtsch wrote: > On Thursday 18 March 2010 11:54:53 Mårten Svantesson wrote: >> I have never worked directly with the APR API but in the example above >> couldn't y

Re: mod_perl memory

2010-03-18 Thread Torsten Förtsch
On Thursday 18 March 2010 11:54:53 Mårten Svantesson wrote: > I have never worked directly with the APR API but in the example above > couldn't you prevent the request pool from growing by explicitly reusing > the bucket brigade? > > Something like (not tested): > > sub { >my ($r)=...@_; >

Re: mod_perl memory

2010-03-18 Thread Mårten Svantesson
Torsten Förtsch skrev: On Thursday 18 March 2010 04:13:04 Pavel Georgiev wrote: How would that logic (adding subpools and using them) be applied to my simplified example: for (;;) { $request->print("--$this->{boundary}\n"); $request->print("Content-type: text/html; charset=utf-8;\n\n");

Re: mod_perl memory

2010-03-18 Thread Torsten Förtsch
On Thursday 18 March 2010 10:16:07 Torsten Förtsch wrote: > No, this one does not grow here. > > sub { > ... forgot to mention that the function is supposed to be a PerlResponseHandler. Torsten Förtsch -- Need professional modperl support? Hire me! (http://foertsch.name) Like fantasy? http://k

Re: mod_perl memory

2010-03-18 Thread Torsten Förtsch
On Thursday 18 March 2010 04:13:04 Pavel Georgiev wrote: > How would that logic (adding subpools and using them) be applied to my > simplified example: > > for (;;) { >$request->print("--$this->{boundary}\n"); >$request->print("Content-type: text/html; charset=utf-8;\n\n"); >$request-