Re: Set AuthName to prompt for sequential passwords

2010-12-28 Thread David Nicol
> Matt Puumala wrote: >> >> Greetings! >> >> I am trying to make a two-factor authentication module, built on >> AuthType Basic. (google for Perfect Paper Passwords for the scheme I'm >> using).  To make it work, I need to be able to prompt the user to type >> in two passwords sequentially. my th

Re: Mixed Children on amd64

2010-09-22 Thread David Nicol
On Tue, Sep 21, 2010 at 4:57 PM, Vincent Veyron wrote: > I realized after the fact that updates _are_ a problem. I suppose one > has to recompile from source. I'm hoping to script the process, > eventually. Off-topic: will gentoo ports work with debian? "emerge mod_perl" == "script the process"

Re: global variable

2010-02-03 Thread David Nicol
DirDB provides a very simple persistence, sharable data structure, using the file system.

Re: Zip on the fly problem

2010-01-12 Thread David Nicol
Not satisfied with the size of your file?

Re: AJAX pseudo-push

2009-11-13 Thread David Nicol
On Fri, Nov 13, 2009 at 1:19 AM, Scott Gifford > > This is a very interesting idea, it might be possible to implement it > with a custom Apache module, or maybe even with mod_perl if you found > the right hooks. > > Scott. so we're talking about a mod_perl app that opens a file system socket

Re: Ways to scale a mod_perl site

2009-09-17 Thread David Nicol
On Thu, Sep 17, 2009 at 4:23 PM, Torsten Foertsch wrote: > I'd go for Apache's mod_cache + mod_disk_cache. The only thing you have > to do is to set cache control headers. Mod_cache is really fast b/c it > skips almost all of the http request cycle. And in your case it takes > load from the datab

Re: dealing with empty field names in query

2009-02-13 Thread David Nicol
On Fri, Feb 13, 2009 at 3:03 PM, Jonathan Vanasco wrote: > A simple typo could render your application broken. Or a hostile competitor.

Re: Class method or Object method?

2009-01-29 Thread David Nicol
in general, doing gymnastics to support IS-A syntax when you have a HAS-A semantic is ill-advised. On Thu, Jan 29, 2009 at 11:54 AM, kropotkin wrote: > > Hi > > In general is it better to use a class method or object method? E.g I have a > class A which provides certain functionality. I just want

Re: unsubscribe

2009-01-22 Thread David Nicol
the idea was floated on the anti-spam research group mailing list recently (dec 08) of the possibility of MUA software to offer an "unsubscribe" button when displaying a message with mailing list headers, possibly in place of the existing "This is spam!" button if any. I filed a feature request w

Re: which reverse proxy for modperl?

2008-12-17 Thread David Nicol
ldirectord will load-balance any number of back-ends; state has to be maintained on all of them the same though

Re: Generic print concatenation question

2008-10-22 Thread David Nicol
On Wed, Oct 22, 2008 at 5:28 AM, André Warnier <[EMAIL PROTECTED]> wrote: > another one I haven't tried how about an Inline::C function that wraps printf and takes $var2 as an argument, and another that takes $var1 as an argument which overwrites the static buffer allocated for the format string?

Re: Any success with storing photos in a database?

2008-09-30 Thread David Nicol
On Tue, Sep 30, 2008 at 11:40 AM, Perrin Harkins <[EMAIL PROTECTED]> wrote: > I don't use it, but it can do auth and serve images. as can Apache itself, with appropriate access control. The two steps (this should not be news to anyone here) are checking the auth then something like "exec cat $fil

Re: Any success with storing photos in a database?

2008-09-29 Thread David Nicol
On Mon, Sep 29, 2008 at 3:16 PM, André Warnier <[EMAIL PROTECTED]> wrote: > Oh, and I've thought of another advantage, in an Apache/web context : to > send the content of a file to a browser, you can take advantage of the > sendfile() call, which is very efficient. Now if your file is a blob in a

Re: a require problem

2008-08-29 Thread David Nicol
On Fri, Aug 29, 2008 at 11:46 AM, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Fri, Aug 29, 2008 at 10:53 AM, Berg, Eric <[EMAIL PROTECTED]> wrote: >> eval( $file ) ... did not successfully execute the code in $file. that isn't supposed to. eval( `cat $file`) should though. Or use Tie::S

Re: secure media files without http_referer

2008-07-02 Thread David Nicol
even simpler is to rename the file every few minutes, and redirect them to the current name. On Wed, Jul 2, 2008 at 2:26 PM, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Wed, Jul 2, 2008 at 3:18 PM, tmpusr889 <[EMAIL PROTECTED]> wrote: >> A cookie would certainly work, but I was trying to find

Re: [OT] connection limitation

2008-05-28 Thread David Nicol
On Wed, May 28, 2008 at 12:51 PM, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Wed, May 28, 2008 at 12:54 PM, Sean Davis <[EMAIL PROTECTED]> wrote: >> I am looking for a >> meaningful way of limiting the number of connections (not really >> bandwidth, since we host VERY large static files) from a

Re: parameters taintness

2008-04-21 Thread David Nicol
On Mon, Apr 21, 2008 at 1:02 PM, Eli Shemer <[EMAIL PROTECTED]> wrote: > Using telnet/netcase is nice but it will be a nightmare to write a > debugger > script that will simulate all of the operations up to that point. (login, > submission of data to the page) http://search.cpan.org/author/PETD

Re: Best practices for returning 404/file-not-found pages inside and outside of mod_perl

2008-04-15 Thread David Nicol
On Tue, Apr 15, 2008 at 2:19 PM, Mark Stosberg <[EMAIL PROTECTED]> wrote: > > return a true 404 Since MP already replaces the C function, it shouldn't be too tricky to abstract 404 and other error codes with by letting exit take arguments -- then you could do what you want with C< 404)>> for ins

Re: reinitializing Perl's notion of $$ in mod_perl

2008-04-15 Thread David Nicol
On Tue, Apr 15, 2008 at 8:28 AM, Mark Blackman <[EMAIL PROTECTED]> wrote: > modperl_perl_init_ids() which itself eventually does a > > sv_setiv(GvSV(gv_fetchpv("$", TRUE, SVt_PV)), ids->pid); > > where ids->pid should contain the result of a recent getpid. > > *However* I note that in the main

Paul Graham presents a golf hole

2008-02-11 Thread David Nicol
http://www.paulgraham.com/arcchallenge.html -- Anyone for four dimensional chess programming?

Re: REST

2007-11-27 Thread David Nicol
> Beginner wrote: > > http://www.myfactory.com/parts/1234 > > > > The resource after /parts could in theory be any number but you would > > not want to have a for each part that existed. Rather > > you'd want the handler responsible for /parts to check your db and > > return either content or 400

Re: OffTopic (slightly) - Module Feedback Wanted - Authen::Ticketless

2007-11-14 Thread David Nicol
have you read up on how CHAP (Challenge Handshake Authentication Protocol) worked for dialup authentication? IIRC it was designed to allow secure-enough authentication over a sniffable channel (modem traffic) at the cost of forcing plaintext password storage on the server side. http://en.wikiped

Re: TIF image file

2007-05-08 Thread David Nicol
On 5/8/07, Vaughn, Terry <[EMAIL PROTECTED]> wrote: Thankyou. I suspect you're right. Any free converters out there for TIF to PNG for either Win or Linux platforms? the USPTO web site links to at least one

Re: Charts and Graphs

2007-04-15 Thread David Nicol
There's always gnuplot; also if GD does some things that the wrapper you are using does not provide hooks for, there's always Inline::C. Another very cool tool worth a look is graphwiz and its tool suite, which I only know about because it was required to get automatic documentation to work (auto

Re: BerkeleyDB cache for webservice

2007-04-05 Thread David Nicol
On 4/5/07, Nils Kaiser <[EMAIL PROTECTED]> wrote: Hello, we are using a webservice to check if a user agent is a mobile or full browser. We have to integrate this on the root path of a site to redirect mobile browsers to a mobile page. I'm a little but stunned that mobile browsers don't ide

Re: Converting a String of bits into a binary number in perl?

2007-03-06 Thread David Nicol
$a="100"; I want to convert this into perl's interpretation of binary no ie $a=0b100 # perl -wple 's/\b([01]+)\b/"0b$1"/gee' 100 4 1001010101 12117 the powers of 2 are 1, 10, 100, 1000, 1, 10 the powers of 2 are 1, 2, 4, 8, 16, 32 -- "Big discoveries are protected by public incre

Re: Code Serialization and mod_perl

2006-10-05 Thread David Nicol
On 10/5/06, Craig Tussey <[EMAIL PROTECTED]> wrote: Please help me understand mod_perl With only Perl, ... the instances don't know about each other and dataspaces are unique to an instance. How does mod_perl handle this. Are there any important differences with the only Perl situation. any

Re: mystery caching problem

2006-10-03 Thread David Nicol
find out if these people are getting into the system because they're sending a cookie/login string with the right details for the wrong account using one-time-use capability keys that can only be obtained by reading the user's e-mail will prevent erroneous log-ins while reducing the number of cr

Re: Logging to a file

2006-09-24 Thread David Nicol
On 9/22/06, Jonathan <[EMAIL PROTECTED]> wrote: composing the info i need to log under mp is trivial i'm a bit uneasy about actually logging to a file though-- it looks like under a prefork model ( i need 2+ servers to handle this ), i'd need to lock / open / write / close / unlock the log file

Re: Getting current url from request?

2006-09-01 Thread David Nicol
On 9/1/06, Jonathan Vanasco <[EMAIL PROTECTED]> wrote: $r-> the_request will give you the HTTP header Are not the standard CGI environment vars still available in modperl? This code snip will dump them for your inspection: print join "\n", "", (map {"$_ is $ENV{$_}"} sort keys %ENV),""; --

Re: Protecting source code

2006-08-25 Thread David Nicol
I think that if obfuscating the source code (by compiling or encrypting or whatever) is a high priority for you, then Perl may not be the best choice of language for your software. And even for Java there are decompilers and for PHP the code must be unencrypted to run. So maybe C is the best choic

don';t let it drive you crazy Re: debugging tip

2006-08-16 Thread David Nicol
in the extreme development model, the task of removing the debug statements rarely gets prioritized to the point of happening. Popularizing constant-based debug statements as a best practice is certainly an approach; maybe if we get some power to impose standards by refusal we can insist that all

Re: debugging tip

2006-08-16 Thread David Nicol
On 8/14/06, Jonathan Vanasco <[EMAIL PROTECTED]> wrote: entering captain obvious mode, i realized use constant DEBUG_CONNECT= $ENV{'P2XLP_DEBUG_CONNECT'} Brilliant! (applause) -- David L Nicol Luddite! (mob of angry villagers with ray guns)

Re: clusters

2006-05-09 Thread David Nicol
On 5/9/06, Harmen <[EMAIL PROTECTED]> wrote: On Tue, May 09, 2006 at 04:47:14PM +0800, Ken Perl wrote: > Is it possible to make a modperl application to run in cluster? if > yes, how to do that? any doc? Take a few mod_perl servers and put one pound (http://www.apsis.ch/pound/) reverse proxy in

Re: anyone with pgpool experience?

2006-04-17 Thread David Nicol
On 4/17/06, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Sun, 2006-04-09 at 22:14 -0500, Frank Wiles wrote: > > I'd suggest trying pgpool without Apache::DBI also. Using both you're > > essentially pooling twice for no real reason. > > Not really. Apache::DBI just provides persistent connect

Re: anyone with pgpool experience?

2006-04-07 Thread David Nicol
On 4/7/06, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Fri, 2006-04-07 at 20:59 -0500, David Nicol wrote: > > Have you looked at DBD::Proxy and DBI::ProxyServer? > > That's not a pooling solution, and the performance is terrible. I'd > recommend just runnin

Re: anyone with pgpool experience?

2006-04-07 Thread David Nicol
Have you looked at DBD::Proxy and DBI::ProxyServer? -- David L Nicol Should the bike shed have bunks? Or maybe cots?

Re: [FRIDAY] Trivia Question

2006-02-20 Thread David Nicol
> It's brian d foy and because he wants it that way: > > http://www252.pair.com/comdog/style.html some editors -- for instance, Wired magazine's policy IIRC -- refuse to recognize capitalization guides from authors, considering capitalization historically the domain of the craft of the scribe/

Re: RegEx Hell

2006-01-31 Thread David Nicol
On 1/31/06, Mark Galbreath <[EMAIL PROTECTED]> wrote: > > Close enough to perl, I hope... this kind of question would best go to your local perl mongers chapter but anyway, I'll break the rules for someone from the General Accounting Office on the occasion of the retirement of Mr. Greenspan... >

Re: Solving mod_perl scalability issues for lots of slow connections

2005-12-31 Thread David Nicol
On 12/24/05, Bob Ippolito <[EMAIL PROTECTED]> wrote: > I don't think any of this is really relevant to mod_perl though, it's bound > to the way Apache works. But if a mod_perl-compatible environment were constructed that did not depend on apache, would that be on-topic for this list? Happy new ye

Re: Solving mod_perl scalability issues for lots of slow connections

2005-12-22 Thread David Nicol
> Ideally we would run this in an event loop Anyone is welcome to take over maintenance of http::server::singlethreaded and add apache/mp features to it, then there would be big monolithic perl web-servers. Blocking in the request handlers would remain a problem, but not anything that couldn't be

Re: How do I check a socket to know it is not closed?

2005-12-21 Thread David Nicol
Joshua ben Jore claimed: You might tell that mod_perl list that he could use http://perlmonks.org/?node_id=367478 to flag unchecked operations like send(). There was even code to automatically fix such code into C. I don't recall whether the code as posted was smart enough to DRT for system() and

Re: How do I check a socket to know it is not closed?

2005-12-20 Thread David Nicol
the send method might return a failure code. The underlying libraries usually return -1 on failures. I don't know exactly what the $sock object is, so the following suggestions are completely untested. I've been doing networking in C recently and I'm checking for -1s all over the place. -m

Re: How do I check a socket to know it is not closed?

2005-12-20 Thread David Nicol
On 12/20/05, Ivan Heffner <[EMAIL PROTECTED]> wrote: > pache2::Connection object. It then reads a message from the > socket (this is working correctly) and then goes off and does some > work. When the work is finished, the handler needs to make sure that > the client is still listening on the oth

Re: mod_perl: How pass variables (objects) from page to page?

2005-11-15 Thread David Nicol
On 11/15/05, Perrin Harkins <[EMAIL PROTECTED]> wrote: > Peter1 Alvin wrote: > > I can't believe Perl doesn't support keeping objects in RAM. This would > > de-qualify Perl for half of the projects I need to develop. > > There are languages with better threading support, particularly Java. > If yo

Re: is there a templating system that....

2005-08-15 Thread David Nicol
On 8/15/05, Matisse Enzer <[EMAIL PROTECTED]> wrote: > Just a data point: > I'm the maintainer of Text::TagTemplate and will soon release a version > that lets you set the regexes that define the start and end of a tag. FWIW, I have just uploaded TipJar::Template::fill to CPAN. It is an abst

Re: is there a templating system that....

2005-08-15 Thread David Nicol
%Template_vars = qw ( misattribution microsoft correction macromedia mailinglist modperl@perl.apache.org product dreamweaver ); $Template_vars{retractor} = 'David L. Nicol'; $TEMPLATE = <

Re: is there a templating system that....

2005-08-15 Thread David Nicol
On 8/15/05, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Mon, 2005-08-15 at 15:48 -0500, David Nicol wrote: >> Tell the designer to make the variable substitution names red, >> and specify in your template system configuration > > target_regex => qr{

Re: is there a templating system that....

2005-08-15 Thread David Nicol
On 8/15/05, David Hodgkinson <[EMAIL PROTECTED]> wrote: > > HTML::Template got ruled out because the only way to get templates > > to render as xhtml valid is to use info as comments > > Huh? you want to validate templates? A template is just that. What > it renders to should be validated! By ha

Re: is there a templating system that....

2005-08-15 Thread David Nicol
On 8/15/05, jonathan vanasco <[EMAIL PROTECTED]> wrote: > Petal templates do look nice, because > Hola, Mundo! > is valid xhtml AND lets you have mockup text that is then replaced > > Unfortunately, petal supports all the smart features of tal like if/ > loops (stuff I didn't want in there

Re: is there a templating system that....

2005-08-12 Thread David Nicol
On 8/12/05, Jonathan Vanasco <[EMAIL PROTECTED]> wrote: > working across the spectrum from design only to code only and in > between , I realized what works and is efficient for me and the people > I collaborate with -- and that is them making little pretty things and > not being able to have any

Re: is there a templating system that....

2005-08-12 Thread David Nicol
On 8/12/05, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Fri, 2005-08-12 at 15:45 -0500, David Nicol wrote: > > my $output = $TemplateCache{$template_name}; > > $output =~ s/\[(\w+)\]/$InsertableVariables{$1}/g; > > print $output; > > The seco

Re: is there a templating system that....

2005-08-12 Thread David Nicol
On 8/12/05, Jonathan Vanasco <[EMAIL PROTECTED]> wrote: > I want all of my templates in the apache process - they're going to be > reused constantly and if they need to be changed i have no problem > doing a graceful restart. my $TemplateCache; BEGIN{ opendir TD, "./templates.d";

Re: is there a templating system that....

2005-08-12 Thread David Nicol
On 8/12/05, Jonathan Vanasco <[EMAIL PROTECTED]> wrote: > > If/else and loops are already 'too much' -- I essentially just want > variable substitution. I want designers to be able to work on a page > and not need to know anything about the code/logic. Names go here, > dates go here, etc. I ha

Re: Persistent storage (storable preferred as mechanism)

2005-07-11 Thread David Nicol
On 7/9/05, Perrin Harkins <[EMAIL PROTECTED]> wrote: > Steven Lembark wrote: > > Also the dumped data is not (usually) > > transferrable between platforms. > > It has always worked for me if I use nfreeze() instead of freeze(). > > - Perrin My gripe with Storable is that it is not possible to ac

Re: high throughput perl server

2005-05-31 Thread David Nicol
On 5/26/05, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Thu, 2005-05-26 at 14:53 -0400, Erik Aronesty wrote: > > ppcgid kicks it's butt in that arena. > > > My business partner and I decided on two tactics: he started building a > > patch to thttpd to run perl scripts natively as opposed to exe

Re: Sessions in rc6+ ?

2005-05-28 Thread David Nicol
> In this specific case, Apache::Session has that name mostly by > coincidence. It could be called Tie::Hash::Persistent or something > similar with no loss of accuracy. > > - Perrin or "DirDB"

Re: Debugging memory allocation

2005-05-10 Thread David Nicol
On 5/10/05, Igor Chudov <[EMAIL PROTECTED]> wrote: > LogHandler seems > like such a place. Undoubtably. But how do you get the memory usage? read /proc/$$/mem or something? there is not, AFAICTFRAQG (as far as I can tell from recollection and quick googling) a line noise variable for current memo

Re: Debugging memory allocation

2005-05-10 Thread David Nicol
how about declaring something like sub LogMemoryUsage(){ open PIDLOG, ">>pidlog"; flock PIDLOG, LOCK_EX; print PIDLOG, "$$ $ENV{SCRIPT_NAME} ",`ps -p $$ -os` close PIDLOG; }; and then calling LogMemoryUsage() at the beginning (and end) of every routine that you suspect might have the

Re: ticketing solutions

2005-04-22 Thread David Nicol
I use AIS::client, which I wrote myself. it hits a central AIS server, the code for the AIS server (an older version of it) is in my CPAN directory too. AIS is completely passwordless, relying on one-time capability tickets to verify receipt of e-mails, and then identity tickets in cookies, so th

Re: how to interpolate html entities easily (HOWTO) (full text of Entitize.pm)

2005-04-21 Thread David Nicol
On 4/21/05, Ken Williams <[EMAIL PROTECTED]> wrote: > True, but it's not too small to submit as a patch for HTML::Entities. > > -Ken or even a doc-patch for HTML::Entities. I think my political goal here is fame points through getting Tie::Function into wider use. HTML::Entities is widely d

how to interpolate html entities easily (HOWTO) (full text of Entitize.pm)

2005-04-20 Thread David Nicol
the following snippet allows stating things like use Entitize; ... print qq{\n}; ... print qq{The full text of the block is $Entitize{$block}\n}; directly, rather that using the generating functions of CGI.pm, or making intermediate variables to hold the results of

Re: About putting the blame on other shoulders

2004-12-29 Thread David Nicol
On Tue, 28 Dec 2004 19:30:28 +0200, Issac Goldstand <[EMAIL PROTECTED]> wrote: > the "use module version" pragma only goes one way: up. > > Issac it's possible to trap the requested version number in your module and provide the interface given by earlier versions when that is requested, but i

Re: Is there a "PerlPreForkHandler"?

2004-12-26 Thread David Nicol
> > For those who are interested, I'm writing an open source universal HTTP > > tunnel (tunnel any > > TCP/IP protocol through HTTP). My plan is to use Apache/mod_perl2 as the > > backend and > > have a small LWP based proxy client. > > Sneak past the firewall, hey? :) Will it take the same con

Re: Persisting data across authenticate <-> authorize ?

2004-12-13 Thread David Nicol
adding TTL to DirDB would not be difficult, using the filesystem's timestamps, and if the files are kept in a tmpfs, or even just deleted before the filesystem syncs, there's no disk traffic. in my opinion, the simplicity of using the file system for persistence is most appealing. I keep repeat

Re: Persisting data across authenticate <-> authorize ?

2004-12-12 Thread David Nicol
On Mon, 13 Dec 2004 01:14:57 -0500, Perrin Harkins <[EMAIL PROTECTED]> wrote: > On Mon, 2004-12-13 at 00:01 -0600, David Nicol wrote: > > this is essentially exactly the application that DirDB was written for. > > Instead > > of locking and corruption issues with a fil

Re: Tar process not dying after user hits "stop"

2004-12-12 Thread David Nicol
> P.S. I included the content-length part just in case anyone knew of a > better way to calculate the size a tarball is going to be before it is > actually generated... if you have enough disk space, you could actually create the tarball into a directory that apache is serving as static, then when

Re: Success Story

2004-12-06 Thread David Nicol
there was talk at Astercon about doing similar things with the perl/asterisk interface. Has anyone ever made a simple wrapper that allows an arbitrary program to be wrapped, like mod_perl, but then the wrapper would get invoked from the command line instead of through an apache server? > We hav

Re: Authentication using https

2004-11-12 Thread David Nicol
while you're at it you might take a look at the kerberos-like AIS infrastructure, which does not at this time use apache extensions at all but which provides passwordless e-mail-based SSO over an arbitrarily wide domain. -- David L Nicol "It's what God and Dwight Eisenhower intended, and it's w

Re: Q: how to implement a network connection per user session

2004-11-07 Thread David Nicol
i am not much of a mp hacker but as I understand it, one problem with making per-session persistent connections would be that there is no guarantee that future requests in the same apache session will be handled by the same mod_perl process. This means that any backend that provided what you are

Re: user login ( authentication )

2004-11-01 Thread David Nicol
"proscribed?" are you sure? m-w.com says that word means 2 : to condemn or forbid as harmful or unlawful : PROHIBIT > You don't use the database's authentication, per se; the proscribed > mechanism is to create a separate MySQL table for uid/password for > web-based authentication. -- David L

Re: $0 ?

2004-10-30 Thread David Nicol
maybe you could call setproctitle(3) directly, somehow? On Fri, 29 Oct 2004 19:37:33 +0200, Torsten Förtsch <[EMAIL PROTECTED]> wrote: > modify $0. -- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html List etiquette: http://perl.apache.org