[15795] in Perl-Users-Digest

home help back first fref pref prev next nref lref last post

Perl-Users Digest, Issue: 3208 Volume: 9

daemon@ATHENA.MIT.EDU (Perl-Users Digest)
Tue May 30 14:10:36 2000

Date: Tue, 30 May 2000 11:10:24 -0700 (PDT)
From: Perl-Users Digest <Perl-Users-Request@ruby.OCE.ORST.EDU>
To: Perl-Users@ruby.OCE.ORST.EDU (Perl-Users Digest)
Message-Id: <959710224-v9-i3208@ruby.oce.orst.edu>
Content-Type: text

Perl-Users Digest           Tue, 30 May 2000     Volume: 9 Number: 3208

Today's topics:
    Re: HALL OF SHAME :-) (Jerome O'Neil)
    Re: HALL OF SHAME :-) (Jerome O'Neil)
    Re: Help needed with SNPP!!!!!!!!!!!!!! <mkhan@crosscom.com>
    Re: help newbie : how to count line into a txt file (Kragen Sitaker)
    Re: HELP: how use '\<CRs>' with "perl -e" in a shell pi <tina@streetmail.com>
    Re: HELP: how use '\<CRs>' with "perl -e" in a shell pi (Kragen Sitaker)
    Re: Is Perl for me? brondsem@my-deja.com
    Re: modify the environment variables permanently via Pe (Kragen Sitaker)
        Monitor data flow through a process? (Sebastian Marius Kirsch)
    Re: MySQL problem: $DBI::errstr always null <lr@hpl.hp.com>
        newbee regex question transpulse@hotail.com
    Re: newbee regex question <transpulse@hotmail.com>
    Re: newbee regex question <tina@streetmail.com>
    Re: PERL and UDP Source port? nobull@mail.com
        Perl and wxWindows <l.marechal@chello.nl>
    Re: Perl and wxWindows (Elaine -HFB- Ashton)
    Re: Perl Tabular -> XML (Anthony DeLorenzo)
    Re: Perl unusable as a programming language <dan@tuatha.sidhe.org>
        Powered by Perl logo (Jimmy Hat)
        Problem installing Tk module in perl <mmp3@pvh.org>
        reading STDERR from a piped process file handle (vener)
    Re: security problems in Perl code nobull@mail.com
    Re: seeking method to encode email addresses in web pag (Elaine -HFB- Ashton)
    Re: seeking method to encode email addresses in web pag (Jerome O'Neil)
    Re: seeking method to encode email addresses in web pag (Elaine -HFB- Ashton)
        Digest Administrivia (Last modified: 16 Sep 99) (Perl-Users-Digest Admin)

----------------------------------------------------------------------

Date: Tue, 30 May 2000 17:01:31 GMT
From: jerome@activeindexing.com (Jerome O'Neil)
Subject: Re: HALL OF SHAME :-)
Message-Id: <LtSY4.142$lg1.2848@news.uswest.net>


> jerome@activeindexing.com (Jerome O'Neil)

WooHoo!  

Thank God for Andy Worhol!

For all my new fans, the above address is somewhat broken.  The
one found in my reply-to: header should let you commune with me.

Thanks to all the little people, without who, none of this would
be possible.


------------------------------

Date: Tue, 30 May 2000 17:03:05 GMT
From: jerome@activeindexing.com (Jerome O'Neil)
Subject: Re: HALL OF SHAME :-)
Message-Id: <dvSY4.145$lg1.2848@news.uswest.net>

Rick Delaney <rick.delaney@home.com> elucidates:

> This is a red herring, as "challenging" incorrect posts by following up
> to the troll is of no more value than following up with a correct answer
> to the orignal poster.  If you stop paying attention to the troll, it
> will disappear.

This method of dealing with trolls has been tried, and failed.

This troll is a particularly resiliant one.  New trollicides must
be tried.


------------------------------

Date: Tue, 30 May 2000 10:14:02 -0500
From: "Mohammad Khan" <mkhan@crosscom.com>
Subject: Re: Help needed with SNPP!!!!!!!!!!!!!!
Message-Id: <3933da45$0$26631@wodc7nh0.news.uu.net>

It's working. Thanks guyssssssss.

Mohammad Khan wrote in message <392bff4f$0$18620@wodc7nh1.news.uu.net>...
>Hi,
>      Is there any way to send multi choice responses through Perl SNPP
>module. For example, I want to send a message to my 2 way skytel pager with
>multiple choices response, so that skytel user will choose one of the
>responses and email it back to me.
>
>Thanks.
>
>




------------------------------

Date: Tue, 30 May 2000 16:29:45 GMT
From: kragen@dnaco.net (Kragen Sitaker)
Subject: Re: help newbie : how to count line into a txt file
Message-Id: <Z%RY4.126311$681.2379145@news-east.usenetserver.com>

In article <39339D92.A9379252@archangelis.com>,
Olivier laurent  <olivier.laurent@archangelis.com> wrote:
>I usually work with javascript/HTML (I'm a webdesigner) and I don't know
>nothing at all about perl.
>
>I've got to make a script that count the number of lines of a txt file.
>and publish the result into a static HTML page.
>
>Is there anybody who can tell me how to start ?

On Unix, I'd probably invoke wc -l.

system "wc", "-l", $filename;

If you're coming up with the filenames yourself, you could do something
like $nl = `wc -l $filename`; however, if they are supplied by a web
client (which is untrusted by definition), that will be insecure, and
you're probably better off counting the lines yourself in Perl.
-- 
<kragen@pobox.com>       Kragen Sitaker     <http://www.pobox.com/~kragen/>
The Internet stock bubble didn't burst on 1999-11-08.  Hurrah!
<URL:http://www.pobox.com/~kragen/bubble.html>
The power didn't go out on 2000-01-01 either.  :)


------------------------------

Date: 30 May 2000 15:38:51 GMT
From: Tina Mueller <tina@streetmail.com>
Subject: Re: HELP: how use '\<CRs>' with "perl -e" in a shell pipe ??
Message-Id: <8h0nab$268tc$4@fu-berlin.de>

hi,

monsri@my-deja.com wrote:

>> echo "something" | perl -e '<perl instructions>'

> but with a backslash and a carriage-return to make this
> instructions more legible in my shell-script. I want to
> be able to do:
>> echo "something" | perl -e '<perl instruction1 \
>                                perl instr. 2     \
>                                etc etc.>'

well, you can just type anything in the shell with carriage returns,
and without backshlashes.
as the perl command has ' around it the shell will see, oh, there's
more coming.
type
$ echo "huhu" |perl -e'print "Input:\n";
 print while <>;'

and it will work! (even if you put this into a shell script)

tina

-- 
http://www.tinita.de \  enter__| |__the___ _ _ ___
tina's moviedatabase  \     / _` / _ \/ _ \ '_(_-< of
search & add comments  \    \ _,_\ __/\ __/_| /__/ perception


------------------------------

Date: Tue, 30 May 2000 15:42:26 GMT
From: kragen@dnaco.net (Kragen Sitaker)
Subject: Re: HELP: how use '\<CRs>' with "perl -e" in a shell pipe ??
Message-Id: <CjRY4.125845$681.2367810@news-east.usenetserver.com>

In article <8h0eqk$6qh$1@nnrp1.deja.com>,  <monsri@my-deja.com> wrote:
>I guess my subject is not very clear-cut: I'd like to
>know if there's a way of using a command line of
>perl in a shell, in a pipe for example, like in the
>following:
>> echo "something" | perl -e '<perl instructions>'
>
>but with a backslash and a carriage-return to make this
>instructions more legible in my shell-script.

If you're writing a shell script, you're presumably using a Bourne
shell; if you're using a Bourne shell, you can put carriage returns
(well, newlines) anywhere you like inside quotes, without even
backslashing them.

e.g.

perl -e 'print "hi\n";
         print "I am still here\n";'
-- 
<kragen@pobox.com>       Kragen Sitaker     <http://www.pobox.com/~kragen/>
The Internet stock bubble didn't burst on 1999-11-08.  Hurrah!
<URL:http://www.pobox.com/~kragen/bubble.html>
The power didn't go out on 2000-01-01 either.  :)


------------------------------

Date: Tue, 30 May 2000 17:24:07 GMT
From: brondsem@my-deja.com
Subject: Re: Is Perl for me?
Message-Id: <8h0tf2$inj$1@nnrp1.deja.com>

In article <8h0fuf$qru$1@porthos.nl.uu.net>,
  "Robert Voesten" <robert@pharmapartners.nl> wrote:
> Hi there,
>
> I just started Perl, because I'm a webdesigner; and there are 2
(general)
> ways of getting information from a client, who views your webpages:
> A) ASP
> B) CGI/PERL

Another good language is ColdFusion by Allaire.  It is quite simple and
easy to learn, but is still quite powerful, especially if you plan on
using databases.

Dave Brondsema


>
> And since I really hate Billy, and getting more and more used to an
*nix
> enviroment i started with Perl.
> I've heard that it comes in handy if you know C(++)/Perl if you work
in a
> *nix enviroment because you can build and customize it the way you
want. So
> since, you're an admin, I guess it IS valueble to learn Perl. The
best book
> is said to be is "Programming Perl 2nd Edition" by Larry Wall
(creator of
> PERL) published by O'reilly.
>
> Good luck,
>
> Robert Voesten
>
> "Garbage" <peterhardingNOpeSPAM@yahoo.com.invalid> schreef in bericht
> news:041afcc0.08aae64c@usw-ex0102-013.remarq.com...
> > This maybe isn't the right forum for this type of question, BUT:
> >
> > I am a UNIX administrator who would like to increase my skill
> > set. I am NOT a programmer, but would like to learn a new skill
> > that will put me in good shape for the future:-
> >
> > 1. Is Perl going places?
> > 2. Is it old hat technology?
> > 3. Is it in great demand by ISP's?
> >
> > Thanks for any guidance on this.
> >
> > * Sent from RemarQ http://www.remarq.com The Internet's Discussion
Network
> *
> > The fastest and easiest way to search and participate in Usenet -
Free!
> >
>
>

--
I exist.


Sent via Deja.com http://www.deja.com/
Before you buy.


------------------------------

Date: Tue, 30 May 2000 15:37:47 GMT
From: kragen@dnaco.net (Kragen Sitaker)
Subject: Re: modify the environment variables permanently via Perl
Message-Id: <ffRY4.125782$681.2366649@news-east.usenetserver.com>

In article <3933AF18.336A1E0B@ieee.org>,
Andreas Vörg  <a.voerg@ieee.org> wrote:
>I am looking for a way to modify the environment variables permanently
>via Perl. I tried system(...); and $ENV{...}, but after runtime of the
>script, my modifications are gone.

Yes; in UNIX and Windows NT, each process has its own environment,
separate from anybody else's.  Each process can only change its own
environment.  There are at least a couple of ways to get around this:
- run whatever process that needs weird environment variables set from
  the Perl script --- sounds like you want a shell; you can use either
  system() or exec() for this;
- use eval `perlscript` in the shell; you can wrap this up in an alias
  or shell function.
-- 
<kragen@pobox.com>       Kragen Sitaker     <http://www.pobox.com/~kragen/>
The Internet stock bubble didn't burst on 1999-11-08.  Hurrah!
<URL:http://www.pobox.com/~kragen/bubble.html>
The power didn't go out on 2000-01-01 either.  :)


------------------------------

Date: 29 May 2000 23:22:42 +0200
From: skirsch@moebius.inka.de (Sebastian Marius Kirsch)
Subject: Monitor data flow through a process?
Message-Id: <8gun32$4sp$1@moebius.priv>

Hello,

I am writing a simple script that will scan images and convert them to a
PDF document. I use Thomas Merz' pdflib for PDF creation.

I use scanimage to scan the images; this program writes its output to
stdout. I use either pnmtopng (from netpbm) or cjpeg to convert the
output of scanimage to a format understood by pdflib; all these
converters accept input from stdin and write to stdout.

I want to monitor how much data flows from scanimage to the converter,
and from the converter to a temporary file, displaying a progress meter.

My current attempt looks like this: 

# This sub will read from $from and write to $to, writing a "." to the
# screen for every megabyte read. 
sub tee () { 
    my ($from, $to, $count, $recvd) = (shift, shift, 0, 0);
    my $ind = (shift || '.');
    while ($recvd = read($from, my $buffer, 2**10)) {
	$count += $recvd;
	print $to $buffer;
	print $ind x int($count / 2**20);
	$count %= 2**20;
	undef $buffer;
    }
    return $recvd;
}

sub scan () {
# [... initialization ...]

# %scan holds all kinds of information about the image that is being
# scanned; @images is a global array of the images scanned so far.

    STDOUT->autoflush;

    print "Scanning ";

    my ($scanout, $ppin, $ppout, $tempfile);
    foreach ($scanout, $ppin, $ppout, $tempfile) {
	$_ = FileHandle->new;
    }
    
    $scanout->open("scanimage $scan{args} |") or die "could not start scanimage process.\n";

    if (open($ppin, "|-")) {
	# parent
	if (! defined(&tee($scanout, $ppin))) {
	    die "An error occurred during scanning!\n";
	}
    } else {
	# child
	my $postproc = open2($ppout, "<&STDIN", $scan{imgtype}->postproc);
	$tempfile->open("> $scan{file}") or die "could not open temporary file $scan{file}.\n";
	if (! defined(&tee($ppout, $tempfile, '+'))) {
	    die "An error occurred during postprocessing!\n";
	}	
# [... waitpid()in for $postproc, error checking ...]	
	};
	$tempfile->close;
	$ppout->close;
	exit $?;
    }
    
    print "\n";

    $scanout->close; 
# [... error checking ...]
    $ppin->close;

    if (-s $scan{file}) {
	push @images, { %scan };
    }
}

As you can see, I fork() and let the child process handle the converter;
this way, the &tee functions work simultaneously.

Do you have any comments about my way of doing it? A better way of doing
it? Obvious blunders in my code?

If I read from scanimage to the converter first, and from the converter
to the temp file afterwards, some converter programs (eg. cjpeg) will
block while trying to write the output. (The netpbm programs read the
while input into memory first, and the convert it, so this problem does
not occur with them.)

I read something in the Camel book about using a select() loop with
sysread. I'm not sure whether this would work in this case (I haven't
tried); I think my solution is simpler, but has the additional overhead
of fork()ing a new process. Can anyone point me to an example of a
select() loop, and explain whether this would work in this case?

Sorry for posting neither the complete script nor a working example. If
you are interested in seeing the complete script, I can send it by
e-mail (it's about 20KB). (Or, if requested, I can also post it here.) I
also intend to put it on a web page sometime or other. I wouldn't mind
having it thoroughly criticized.

It has a commandline interface, macro capabilities, init files and the
ability to source other files. All very basic (me never having written a
parser for this kind of thing before) but it seems to work ... mostly.

Oh ... Don't you think it's time for comp.sources.perl?

-- 
Yours, Sebastian <skirsch@moebius.inka.de>

I never wanted to be a painter. I wanted to be a tap dancer.
                                                          -- Andy Warhol


------------------------------

Date: Tue, 30 May 2000 10:18:06 -0700
From: Larry Rosler <lr@hpl.hp.com>
Subject: Re: MySQL problem: $DBI::errstr always null
Message-Id: <MPG.139d97aa1bc46afe98ab01@nntp.hpl.hp.com>

In article <8gvn43$ltg$1@nnrp1.deja.com> on Tue, 30 May 2000 06:29:33 
GMT, jlamport@calarts.edu <jlamport@calarts.edu> says...
> In article <8grtp2$4ho$1@nnrp1.deja.com>,
>   jsunden@my-deja.com wrote:
> > Try omitting the $-sign and write DBI->errstr instead. Then it should
> > work -- it does for me when I use it like this:
> >
> >    $sth->execute or die "Something went wrong: ", DBI->errstr;
> 
> Nope.  Attempting to evaluate DBI->errstr causes my program to die with
> 
> "Can't locate auto/DBI/errstr.al in @INC"
> 
> Which makes sense to me, since as I understand it, I'm trying to access a
> variable, not call a function...
> 
> Any other suggestions?

Yes.  Either $DBI::errstr (which is a scalar variable that interpolates 
into double-quoted contexts just fine) or $dbh->errstr (which is a 
method invocation that doesn't interpolate).  Here $dbh is the handle 
returned by the DBI connect() statement.


<SNIP> of complete and unnecessary quote of the entire article being 
responded to, which wastes bandwidth inordinately.  You used proper 
quoting style above; please stick with it.

-- 
(Just Another Larry) Rosler
Hewlett-Packard Laboratories
http://www.hpl.hp.com/personal/Larry_Rosler/
lr@hpl.hp.com


------------------------------

Date: Tue, 30 May 2000 19:21:05 +0200
From: transpulse@hotail.com
Subject: newbee regex question
Message-Id: <3933F881.B571E960@hotail.com>


hi there,

i need help with reqex. 
i want to check a certain string for illegal charaters. (legel charaters
are a-z A-Z 0-9 - . /). How can i do this with regex.

Thx for your help

daniel


------------------------------

Date: Tue, 30 May 2000 19:31:49 +0200
From: transpulse <transpulse@hotmail.com>
Subject: Re: newbee regex question
Message-Id: <3933FB05.5DCCA75B@hotmail.com>

sorry Mail-Adress was wrong:

right adress is transpulse@hotmail.com

regards

transpulse@hotail.com wrote:
> 
> hi there,
> 
> i need help with reqex.
> i want to check a certain string for illegal charaters. (legel charaters
> are a-z A-Z 0-9 - . /). How can i do this with regex.
> 
> Thx for your help
> 
> daniel


------------------------------

Date: 30 May 2000 17:57:20 GMT
From: Tina Mueller <tina@streetmail.com>
Subject: Re: newbee regex question
Message-Id: <8h0vdv$268tc$11@fu-berlin.de>

hi,

transpulse@hotail.com wrote:

> i need help with reqex. 

perldoc perlre

> i want to check a certain string for illegal charaters. (legel charaters
> are a-z A-Z 0-9 - . /). How can i do this with regex.

where's the problem? have you tried anything?

print "not ok" if /[^\w\.]/

tina

-- 
http://www.tinita.de \  enter__| |__the___ _ _ ___
tina's moviedatabase  \     / _` / _ \/ _ \ '_(_-< of
search & add comments  \    \ _,_\ __/\ __/_| /__/ perception


------------------------------

Date: 30 May 2000 17:40:01 +0100
From: nobull@mail.com
Subject: Re: PERL and UDP Source port?
Message-Id: <u9ln0s56vy.fsf@wcl-l.bham.ac.uk>

cheming@lis.pitt.edu (Che-Ming Chang) writes:

> $client = IO::Socket::INET->new(PeerAddr  => "172.18.111.100",
>                                 PeerPort  => 2427,
>                                 localAddr => "161.44.15.32",
>                                 localPort => 2427,

s/local/Local/g

-- 
     \\   ( )
  .  _\\__[oo
 .__/  \\ /\@
 .  l___\\
  # ll  l\\
 ###LL  LL\\


------------------------------

Date: Tue, 30 May 2000 17:53:35 +0200
From: "Laurent Marechal" <l.marechal@chello.nl>
Subject: Perl and wxWindows
Message-Id: <8h0o1n$8el$1@spectra.a2000.nl>

 Hello,

 I apologize for the cross-posting.

 I was looking for a portable GUI system (unix/win32, I would like something
 else than Tk). and I found wxWindows (www.wxwindows.org) There is a
'module'
 that allow you to use it from Python. There is also a reference to a Perl
 module to use it, but I'm unable to find it.

 I anyone know where to find it or know if it already exist ?

 Thanks for your help

 Laurent







------------------------------

Date: 30 May 2000 16:20:16 GMT
From: elaine@chaos.wustl.edu (Elaine -HFB- Ashton)
Subject: Re: Perl and wxWindows
Message-Id: <slrn8j7qf7.j1g.elaine@chaos.wustl.edu>

In article <8h0o1n$8el$1@spectra.a2000.nl>, Laurent Marechal wrote:
>
> I anyone know where to find it or know if it already exist ?

ftp://www.remstar.com/pub/wxwin/contrib/wxperl/

e.


------------------------------

Date: 30 May 2000 17:21:25 GMT
From: gonzo@vex.net (Anthony DeLorenzo)
Subject: Re: Perl Tabular -> XML
Message-Id: <8h0tal$15d4$1@news.tht.net>

>The docs that come with it mention using XML::Parser to further enhance the
>output.I can't quite seem to fathom though how XML::Parser will allow me to
>make the XML adhere to a certain DTD.

XML::Parser wouldn't be able to help you there, as it is a non-validating
parser.  DTD-driven stuff is pretty sketchy right now in XML.  If all 
you are using is one DTD, you should be able to write your perl script
to produce valid output.  Check it using an on-line validator, and then 
don't worry about it.

If you're hoping to be able to use different DTD's with one script, you
are getting into a whole level of complexity...  I've been working on 
a similar problem lately.

That said, I'm not such a big fan of DTD's anyway.  They're great for 
developing your XML language, but using them on a constant basis 
(ie for validation and generation of XML) creates some pretty 
hefty overhead.

Regards,

Tony

-- 
# Anthony DeLorenzo <drgonzo@canada.com>
# http://www.vex.net/~gonzo/
# mojo wire: 209-391-8932


------------------------------

Date: Tue, 30 May 2000 15:30:46 GMT
From: Dan Sugalski <dan@tuatha.sidhe.org>
Subject: Re: Perl unusable as a programming language
Message-Id: <G8RY4.98360$hT2.399322@news1.rdc1.ct.home.com>

In comp.lang.perl.misc Malcolm Dew-Jones <yf110@victoria.tc.ca> wrote:
> Tushar Samant (Tbone@pimpdaddy.com) wrote:
> : The scary parts, actually, are the semantics... e.g. 

> : f($1), which has no relation to $1 at function call time.


> Could you explain this comment please.  I don't understand what the
> issue would be with "f($1)"

Because of some of the oddities of perl, accessing a match variable gets
you the value of the variable at the time you use it. So if you do this:

 $bar = "abc";
 $bar =~ /(b)/;
 foo($1);

 sub foo {
   "abc" =~ /(c)/;
   my $bar = shift;
   print $bar, "\n";
 }

it prints c, because $1 (which you unshifted off the parameter list) was c
at that point because of the regex match.

Match variables behave in ways that can be reasonably called bizarre. :)

					Dan


------------------------------

Date: Tue, 30 May 2000 16:46:51 GMT
From: jimmy@jimmy-hat.com (Jimmy Hat)
Subject: Powered by Perl logo
Message-Id: <200005301646.MAA31514@fozzie.webservepro.com>

Does anyone know of a "Powered by Perl" logo free
for use to point back to an advocacy site
like http://www.perl.org ?

-Jimmy



------------------------------

Date: Tue, 30 May 2000 10:14:02 -0600
From: MP <mmp3@pvh.org>
Subject: Problem installing Tk module in perl
Message-Id: <3933E8CA.6FA75359@pvh.org>

The DBI module required Tk so here is my error I am getting. It deals
with X11, any
help would be great. The ouput:

root@test:/usr/local/lib/perl5/site_perl/5.6.0/sun4-solaris/Tk800.022:110
perl Makefile.PL
perl is installed in /usr/local/lib/perl5/5.6.0/sun4-solaris okay
PPM for perl5.006
Test Compiling config/signedchar.c
Test Compiling config/Ksprintf.c
Test Compiling config/tod.c
Generic gettimeofday()
/usr/openwin/bin/xmkmf suggests /usr/openwin
Using -L/usr/openwin/lib to find /usr/openwin/lib/libX11.so.4
Cannot find X include files via /usr/openwin/include
Cannot find X include files anywhere at ./myConfig line 312.
Compilation failed in require at Makefile.PL line 17.
BEGIN failed--compilation aborted at Makefile.PL line 19.



------------------------------

Date: 30 May 2000 17:19:43 GMT
From: rudy@tigger.mt.lucent.com (vener)
Subject: reading STDERR from a piped process file handle
Message-Id: <8h0t7f$bij@nntpb.cb.lucent.com>


I'm trying to operate a program from within perl that uses
the standard error as its prompt and uses standard input.
The program generates a user defined pasword interactively 
with no provision for command line operation (or else this
problem would not exist).

I'd like to do something like:

open (PROG, "| program |") or die "cannot run program");

while (<PROG>)
{


   if ($+ eq "Password prompt: ")
   {
      print PROG "$password\n";
   }
   if ($+ eq "Password confirmation: ")
   {
      print PROG "$password\n";
      close (PROG);
   }
}

Unfortunately this didn't work, probably because the program uses
standard error rather than standard output.  Is there a way to 
redirect the password program's standard error to the parent 
process? Should I be using something other than open() ? 

Thanks for any suggestions.

Rudy
-- 
Rudy Vener
Lucent Technologies/Bell Labs Innovations
200 Laurel Avenue Rm 2D-509
vener@lucent.com  


------------------------------

Date: 30 May 2000 17:48:09 +0100
From: nobull@mail.com
Subject: Re: security problems in Perl code
Message-Id: <u9itvw56ie.fsf@wcl-l.bham.ac.uk>

Jonathan Stowe <gellyfish@gellyfish.com> writes:

> On Thu, 25 May 2000 18:38:26 GMT jdimov@cis.clarion.edu wrote:
> > Folx,

> >     Common security vulnerabilities in Perl code
> > 
> >     - opening files with user specified filenames

> >     - not using Perl taint mode for CGI scripts

> This above will prevent any of the prior constructs from being used
> in an unsafe way. 

I used to believe that.  Indeed I said it here once and was corrected
(by Tom).  open() accepts a tainted filename for read-only opens.
This means that a poor validation in a CGI script may give the distant
user access to any file to which the HTTP daemon has access.

-- 
     \\   ( )
  .  _\\__[oo
 .__/  \\ /\@
 .  l___\\
  # ll  l\\
 ###LL  LL\\


------------------------------

Date: 30 May 2000 16:12:35 GMT
From: elaine@chaos.wustl.edu (Elaine -HFB- Ashton)
Subject: Re: seeking method to encode email addresses in web page forms
Message-Id: <slrn8j7q0p.j1g.elaine@chaos.wustl.edu>

In article <3933D820.95E06CF1@stomp.stomp.tokyo>, Godzilla! wrote:
>
>Practice social grace with me. I have dignity and
>pride within an environment lacking these qualities.

Why should they behave any differently than you? Well..they don't actually.

e.


------------------------------

Date: Tue, 30 May 2000 16:34:41 GMT
From: jerome@activeindexing.com (Jerome O'Neil)
Subject: Re: seeking method to encode email addresses in web page forms
Message-Id: <B4SY4.115$lg1.2848@news.uswest.net>

"Godzilla!" <callgirl@la.znet.com> elucidates:
> Larry Rosler wrote:
> 
>> ... It has no concept 
>> ... It also has no concept 
>> ... doesn't interest it.
> 
> 
> I am not an "it" as you suggest.

You are a troll, and devoid of gender, or personhood. You are an "it,"
as are all trolls.

> Remarkably, I am a person.

Not.


------------------------------

Date: 30 May 2000 16:39:47 GMT
From: elaine@chaos.wustl.edu (Elaine -HFB- Ashton)
Subject: Re: seeking method to encode email addresses in web page forms
Message-Id: <slrn8j7rjp.j1g.elaine@chaos.wustl.edu>

In article <3932CA60.687C1212@stomp.stomp.tokyo>, Godzilla! wrote:
>Elaine Ashton wrote:
>
>(Godzilla! wrote:)
>
>> >> year for an exceptionally busy site at
>> >> 274 hits per day. In 30 years, a 15 minute
>
>> That was such an obvious troll that even I laughed....
>
>A review of internet statistics and Bell curved
>statistical averages for stereotypical average
>internet sites, show my stats to be quite right.

I'd like to see those stats, but realistically, sites that are 
in this line of business full-time, get quite a few more 'hits' as
you call them per day. When you have 37 E3000s sitting behind a load
balancer of some sort, you can handle considerably more. Now, when
you are in the small pond, 274 might seem like a whole lot, but it's
not 'exceptional' traffic. Everything is relative.

>The topic of this thread pertains to protecting
>email addresses for a small chat / board type of
>circumstances. A chat / board of this type under
>discussion, could not handle millions of hits per
>day as you and others indicate. Your comments are 
>most unrealistic and most illogical.

Forgive me but I've been the SA of some of the largest web sites
in the world...I could design a site that could handle millions of 
these 'hits' a day but you might flinch at the pricetag. Nothing is
impossible as long as you have the cash to do it. Now, if you mean
Perl4 or your code couldn't perform at that capacity, I'd bet you
are quite correct.

>I will ask you to stop falsely accusing me of
>being a troll, this is, I am asking you to
>stop trolling and harassing me.

I'm fairly certain that you don't know the definition of 'harass'. 
I once had a geek boy stalk me to the point of showing up at my 
home and some scary weeks later it took nothing less than my 
having a gun and a few friends in dark suits to illustrate 
fairly concretely that he was not welcome. To disagree or to find
the comments you make deliberately incendiary [ read troll ] is
my First Amendment right not harassment.

I should say that I'm offended that you are a man hiding behind 
the facade of a woman for a purpose only you know.

e. 


------------------------------

Date: 16 Sep 99 21:33:47 GMT (Last modified)
From: Perl-Users-Request@ruby.oce.orst.edu (Perl-Users-Digest Admin) 
Subject: Digest Administrivia (Last modified: 16 Sep 99)
Message-Id: <null>


Administrivia:

The Perl-Users Digest is a retransmission of the USENET newsgroup
comp.lang.perl.misc.  For subscription or unsubscription requests, send
the single line:

	subscribe perl-users
or:
	unsubscribe perl-users

to almanac@ruby.oce.orst.edu.  

| NOTE: The mail to news gateway, and thus the ability to submit articles
| through this service to the newsgroup, has been removed. I do not have
| time to individually vet each article to make sure that someone isn't
| abusing the service, and I no longer have any desire to waste my time
| dealing with the campus admins when some fool complains to them about an
| article that has come through the gateway instead of complaining
| to the source.

To submit articles to comp.lang.perl.announce, send your article to
clpa@perl.com.

To request back copies (available for a week or so), send your request
to almanac@ruby.oce.orst.edu with the command "send perl-users x.y",
where x is the volume number and y is the issue number.

For other requests pertaining to the digest, send mail to
perl-users-request@ruby.oce.orst.edu. Do not waste your time or mine
sending perl questions to the -request address, I don't have time to
answer them even if I did know the answer.


------------------------------
End of Perl-Users Digest V9 Issue 3208
**************************************


home help back first fref pref prev next nref lref last post