Re: Basic authentication without a secure connection

2009-05-04 Thread Joseph Millet
There's one thing you may do: implement an authentication web service on tomcat's side. Make a wsdl service running on it accepting request on whether given encrypted session id is a valid one, service does check either a running session use that id and simply replies OK or KO. But that means imple

Re: Why we need two servers (httpd and tomcat)

2009-04-27 Thread Joseph Millet
What's then common use where the two are required ? On Mon, Apr 27, 2009 at 11:21 PM, Pid wrote: > Leon Rosenberg wrote: > > On Mon, Apr 27, 2009 at 9:21 PM, André Warnier wrote: > >> Leon Rosenberg wrote: > >>> I'm sorry, I can't shut up my mouth on this, but you are telling myths > :-) > >>>

Re: Tomcat 5 and UTF-8

2009-04-06 Thread Joseph Millet
Not as much unrelated to the topic that my interventoion was - sorry didn't see it had already been addressed. On Mon, Apr 6, 2009 at 10:00 PM, Chris Lenart wrote: > I am using Tomcat 6.0.18 with Eclipse. It says the port is being used. > Where do I change? > > >

Re: Tomcat 5 and UTF-8

2009-04-06 Thread Joseph Millet
Something more to consider relating to specifying charsets in meta tags : It's of course ok that a server sends http headers specifying in what charset the page is encoded but when the user comes to saving that web page on local drive there's nothing left that meta tags to inform browsers the page

Re: Can only view web pages from localhost

2009-03-26 Thread Joseph Millet
Hi Joel, not sure what your problem is but please don't change your message subject each time you reply to the list, it provides an unconvenient way of reading messages here :) ... hope you'll fix that soon ! On Thu, Mar 26, 2009 at 11:10 PM, Joel wrote: > I will try Firefox > > Joel > >

Re: Session lost when app. is redeployed

2009-03-25 Thread Joseph Millet
Not sure this might be of use but Apache normally has a *graceful *restart option that's normally tailored to such needs. On Wed, Mar 25, 2009 at 1:17 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Adriano, > > On 3/24/2009 7:1

Re: [OT] of very off topic marketing question

2009-03-23 Thread Joseph Millet
Right, I apologize too, never had to work with php multi-threading and looking at it existing framework wrappings don't look this good at first glance as it's only meant either for compiled code or command line exec, for C-like expected behaviour. Some Frameworks such as Copix provide script interp

Re: [OT] of very off topic marketing question

2009-03-21 Thread Joseph Millet
[...] Where blast() iterates thru several thousand records, which are sent to a third-party site for processing. The third-party site allows no more than 5 connections per second, so I just call Thread.sleep(1000) on every 5th record. It is very simple, very elegant and very fast now that some mu

Re: form parameters

2009-03-19 Thread Joseph Millet
Maybe I'm missing something but from the little knowledge I have, I'd think an HTML form is posted encoded in the form enclosing HTML document charset specified in the sent Server headers. So that you settle a page encoded in iso-8859-2, you wouldn't expect a form present in that page to post unico

Re: form parameters

2009-03-16 Thread Joseph Millet
Thing is you've got an HTML form that you tell browsers it is ISO-8859-2, so when they post it to form target URL - it gets send encoded as ISO-8859-2, it is then your responsibility to parse incoming queries in the encoding you asked it to be encoded. Depending upon your requirements, UTF-8 will

Re: JSESSIONID hijacking

2009-03-13 Thread Joseph Millet
Just a word about associating a given session to one IP address, it works alright and sure is a security enhancement - not sure though if there are built-in support for that in tomcat though it can be implemented at application layer. The major drawback of doing so depends of your user's ISP IPs ma

Re: SECURITY breach in Tomcat

2009-01-22 Thread Joseph Millet
Not sure this would be useful in your case > http://mail-archives.apache.org/mod_mbox/tomcat-users/200810.mbox/%3c19811090.p...@talk.nabble.com%3e There seems to be issues with app manager and windows running tomcats. On Thu, Jan 22, 2009 at 4:30 PM, Brian Clark wrote: > What version of Tomc

Re: PostgreSQL vs MySQL with Tomcat

2009-01-21 Thread Joseph Millet
Hi all, in my opinion MySql as previously said is a lot easier to administrate, and more "developer friendly" than postgre - even if its process managements is far from being good (some single query may bring it down - as far as I could see so far using 5.1.22 and many previous versions... ). Howe

Re: polish dialectic signs lturn into #

2008-10-13 Thread Joseph Millet
If any of the above are not working you through this ... I understand you rely on some DB layer for "inserts", so that you seem to acknowledge that inserts perform ok and that you get proper unicode stored - you should then investigate how your application connects to that data store, i.e. it's lik

Re: PHP Security Vulnerability???

2007-09-12 Thread Joseph Millet
you've must have got a phpinfo() page running somewhere you can grep your www directory for that one ... JJ On 9/12/07, Arend P. van der Veen <[EMAIL PROTECTED]> wrote: > > Wade Chandler wrote: > > Does it give you any paths to this PHP application? I haven't seen > anything like it from sca