[17031] in Perl-Users-Digest
Perl-Users Digest, Issue: 4443 Volume: 9
daemon@ATHENA.MIT.EDU (Perl-Users Digest)
Wed Sep 27 09:10:29 2000
Date: Wed, 27 Sep 2000 06:10:18 -0700 (PDT)
From: Perl-Users Digest <Perl-Users-Request@ruby.OCE.ORST.EDU>
To: Perl-Users@ruby.OCE.ORST.EDU (Perl-Users Digest)
Message-Id: <970060218-v9-i4443@ruby.oce.orst.edu>
Content-Type: text
Perl-Users Digest Wed, 27 Sep 2000 Volume: 9 Number: 4443
Today's topics:
newbie: perl and html <hmacdonald@europarl.eu.int>
Re: newbie: perl and html <anders@wall.alweb.dk>
Re: newbie: perl and html nobull@mail.com
Re: newbie: perl and html <mari@civil.columbia.edu>
Re: perl modules and insecure dependency errors <mari@civil.columbia.edu>
Re: perl modules and insecure dependency errors <mari@civil.columbia.edu>
Re: Perl on PWS on Win ME / HAVE THE SAME PROBLEM <Master@sdswebspace.com>
Re: Perl on Windows <mikelm@ameritech.net>
Re: Problem with open() nobull@mail.com
Re: Recursion in Perl (Tony L. Svanstrom)
Re: regex problem gumbygumbygumby@my-deja.com
Re: REGEX problem <bart.lateur@skynet.be>
Re: Salary Range for Perl Programmers <nico@monnet.to>
Re: Setting cookies with CGI.pm <Matthew.Couchman@bbsrc.ac.uk>
Re: Setting cookies with CGI.pm <ter@my-deja.com>
Re: Syslog module problems nobull@mail.com
Re: system("cd /var") command aravindh@technologist.com
Re: tekboard.cgi <gellyfish@gellyfish.com>
Re: WorkFromWhereYouARE-PERL-JAVA-JS-CSS-DreamWeaver <gellyfish@gellyfish.com>
Digest Administrivia (Last modified: 16 Sep 99) (Perl-Users-Digest Admin)
----------------------------------------------------------------------
Date: Wed, 27 Sep 2000 11:09:12 +0200
From: macdo <hmacdonald@europarl.eu.int>
Subject: newbie: perl and html
Message-Id: <39D1B938.56BDB817@europarl.eu.int>
Is there a way to have a perl script executed from within an HTML page,
without the user having to take any action.
In effect - is there a perl equivalent to the
<APPLET ...>
or
<SCRIPT LANGUAGE=JavaScript>
for Perl
------------------------------
Date: Wed, 27 Sep 2000 13:12:36 +0200
From: Anders Lund <anders@wall.alweb.dk>
Subject: Re: newbie: perl and html
Message-Id: <LDkA5.2773$Pf.165278@news010.worldonline.dk>
macdo wrote:
> Is there a way to have a perl script executed from within an HTML page,
> without the user having to take any action.
> In effect - is there a perl equivalent to the
> <APPLET ...>
> or
> <SCRIPT LANGUAGE=JavaScript>
> for Perl
>
There was some attempts to do some kind of perlscript some years ago, I
don't know if it stil lives.
However, you have to remember that it would require support from the users
webbrowser.
-anders
--
[ the word wall - and the trailing dot - in my email address
is my _fire_wall - protecting me from the criminals abusing usenet]
------------------------------
Date: 27 Sep 2000 12:34:58 +0100
From: nobull@mail.com
Subject: Re: newbie: perl and html
Message-Id: <u93dim9ifx.fsf@wcl-l.bham.ac.uk>
macdo <hmacdonald@europarl.eu.int> writes:
> Is there a way to have a perl script executed from within an HTML page,
> without the user having to take any action.
>
> In effect - is there a perl equivalent to the
> <APPLET ...>
> or
> <SCRIPT LANGUAGE=JavaScript>
> for Perl
Yes, if the users web browser supports Perl Applets and scripts. I
believe the combination of Windows, IE and ActiveState does so.
--
\\ ( )
. _\\__[oo
.__/ \\ /\@
. l___\\
# ll l\\
###LL LL\\
------------------------------
Date: Wed, 27 Sep 2000 08:35:21 -0400
From: mari <mari@civil.columbia.edu>
Subject: Re: newbie: perl and html
Message-Id: <Pine.LNX.4.10.10009270818470.25416-100000@civil.columbia.edu>
On Wed, 27 Sep 2000, macdo wrote:
> Is there a way to have a perl script executed from within an HTML page,
> without the user having to take any action.
> In effect - is there a perl equivalent to the
> <APPLET ...>
> or
> <SCRIPT LANGUAGE=JavaScript>
> for Perl
(Apache server assumption)
There are several perl HTML::xx modules like Embperl which allow you to
embed perl in html. I've never used them, I just know they exist. You can
also use Server Side Includes if the server is configured correctly to
exec cgis and cmds w/in a html page. The Options Includes must be set and
a type and handler must be added. It's all in the Apache docs.
http://www.apache.org/docs/mod/mod_include.html
<!--#exec cgi="yercgi.cgi"> or <!--#exec cmd="perl yerscript.pl"> should
work.
You can also use php and use the passthru() function to exec a command
line argument (ie 'perl yourscript.pl') and have the output returned and
embedded in your page... probably easier to stick w/ SSI since if dont
have a php enabled webserver, you'd have to rebuild, and SSI support is
compiled in to Apache by default.
m.
------------------------------
Date: Wed, 27 Sep 2000 07:32:49 -0400
From: mari <mari@civil.columbia.edu>
Subject: Re: perl modules and insecure dependency errors
Message-Id: <Pine.LNX.4.10.10009270708420.25416-100000@civil.columbia.edu>
On Wed, 27 Sep 2000, Gwyn Judd wrote:
> I was shocked! How could mari <mari@civil.columbia.edu>
> say such a terrible thing:
> >Im in the process of migrating mod_perl scripts from on server to
> >another.. (Debian to Redhat).. and the only changes that have been made
> >really are upgrading from Apache 1.3.9 to 1.3.12 and upgrading the
> >Apache::Session module and other modules. I am running with PerlTaintCheck
> >On, which simulates the -T switch, but so was the other server. I dont kow
> >how they got around these errors w/o hacking the Apache::Session:File
> >code.
>
> Have you read the documentation in:
>
> perldoc perlsec
yes.
> I think you need to figure out just why Perl thinks data is tainted,
> where you are getting that tainted data from and how you can safely
> untaint it.
I know that. I thought the rest of my post made that clear. Or at least, i
think that the data is tainted bc it's a file/directory from the
filesystem? The dir is only writable by the owner, httpd. The value of the
path of the dir is stored into the %session_data hash and is passed as a
parameter for the tie function which intializes the %session_data and
writes it to a dir where sessions are stored. The path to the directory is
coded into the mod_perl script and the module generates random session ids
as filenames. There's no user input anywhere, therefore, I came to the
conculsion, it must be tainted bc it's part of the filesystem. When I run
tied(%session_data)->delete, the perl module picks out that key and the
session id key, and tries to unlink them... I know i could do a untaint
mechanism like described in perlsec, but my question was, is there any
other way to get this to work W/O hacking the module code bc obviously the
orginal coders got around it somehow.. OR can I untaint in my mod_perl
script and have it remain untainted..but i didnt think that would work, bc
since i explicitly declared the dir path in my script.. i figured it didnt
get tainted there and it was getting tainted in the module.
I'm sorry if i posted this to the wrong group, but it's where I saw the
majority of these questions asked before when i went through deja. Perhaps
it's not a language question, bc the code has the posibility to work, just
not for me on my new system. :\ Maybe more of a workaround issue. It's not
that i dont want to do the work of untainting, it's not really any work at
all.. I dont want to be making changes to the module if it's avoidable and
the code is definitely exactly the same as it was before, and to the best
of my knowledge, the web server config is exactly the same aswell.
m.
------------------------------
Date: Wed, 27 Sep 2000 08:10:31 -0400
From: mari <mari@civil.columbia.edu>
Subject: Re: perl modules and insecure dependency errors
Message-Id: <Pine.LNX.4.10.10009270749210.25416-100000@civil.columbia.edu>
On 27 Sep 2000, Drew Simonis wrote:
> From your example, the $session variable was shifted from the args.
> So, you can either process the info before passing it to the sub or
> after shift()'ing it. Use a nice regex to either trick the -T check
> or actually check for nasties like shell metas. Its up to you.
ok. that was my main question. thank you. :D
i didnt know if i untainted it my mod_perl script w/ the regex, that i
would stay untainted bc something else was going on after that.
> > any help is appreciated in understanding this. should i just 'launder'
> > whats going in the FileStore.pm mod? or can i 'launder' in my script and
> > have the module not think it's tainted...
>
> Personal preference on my part is not to mess around with module
> code unless I have too.
yes. that's what i was trying to avoid.
> >i'm still also very interested
> > in knowing how they got around this problem, why the exact same config.
>
> Have you asked them? (who are _they_ anyway?)
no, unfortunately, they are kind of 'unaskable'. 'they' were the orginal
developers that got tanked.
> perl doesn't care who can write to the directory, it cares about
> where the data came from. If the data that provides part of the
> arguments to unlink() came from outside the program, it is tainted,
> and needs to be cleaned up.
>
> HTH, HAND
yes. it did help. (i think) im still a bit confused about 'outside the
program'. outside the module? or outside the whole module->script->module
chain... and it's tainted bc its part of the filesystem... but i think i
understand enough to take another crack at this.
thanks alot!
m
------------------------------
Date: Wed, 27 Sep 2000 06:01:51 -0400
From: "MASTER" <Master@sdswebspace.com>
Subject: Re: Perl on PWS on Win ME / HAVE THE SAME PROBLEM
Message-Id: <KxjA5.30785$Z2.450865@nnrp1.uunet.ca>
I'm having the same problem except its looking for perl.exe in a file I
don't have created nor have I pointed it to it. but the same response.......
anyone have ideas? please help its very annoying......
"Daniel van den Oord" <danielxx@bart.nl> wrote in message
news:mP4A5.988$EA.6039@Typhoon.bART.nl...
> I have installed Microsoft Personal Webserver on Windows ME... This works
> just fine..
> After this I installed Perl 5.6 build 618 without installation problems...
> Though when I'm trying to excess
> http://daniel304/cgi-bin/filer.pl
> perl says
>
> Can't open perl script ""C:\Inetpub\cgi-bin\filer.pl"": No such file or
> directory
>
> This directory is correct and in a dos-box it does open this file
> correctly...
> I have granted executables and scripts in this dir..
>
> Anybody knows what kinda problem this is.. except for a annoying one ?!?
>
> Thanks
>
>
------------------------------
Date: Wed, 27 Sep 2000 07:23:25 -0500
From: "The Ancient" <mikelm@ameritech.net>
Subject: Re: Perl on Windows
Message-Id: <WDlA5.71$Vz1.44739@nntp0.chicago.il.ameritech.net>
"Cyber Dog" <cyberdog@nycap.rr.com> wrote in message
news:st2fsdod4st85b@corp.supernews.com...
> I'm writing perl scripts in my Windows 98 environment using ActiveState's
> ActivePerl. The scripts execute fine when I run them, but as soon as the
> execution is finished the MS-DOS window they run in automatically closes.
> How can I keep it open so I can view the final output?
>
> --
> Posted via CNET Help.com
> http://www.help.com/
Uncheck the "Close on exit" check box in the properties program tab
------------------------------
Date: 27 Sep 2000 08:22:16 +0100
From: nobull@mail.com
Subject: Re: Problem with open()
Message-Id: <u9d7hq9u53.fsf@wcl-l.bham.ac.uk>
"Duncan Bayne" <dhbayne@xtra.co.nz> writes:
> Could someone please help me with a problem I'm having. I have a script I
> am running on two RH machines, RH5.0 and 7.0. On the 7.0 machine, the
> script runs perfectly.
So you can reasonably guess something has changed between the two
versions of Perl on the different machines. Have you checked the
perldelta manpage on the newer version?
> open($LOG, '>>/home/grantlog/log.txt') or die;
>
> dies with the following message:
>
> Can't use an undefined value as filehandle reference at grant.cgi line
> 118, <STDIN> chunk 1.
>
> Can anyone help?
Filehandle autovivification in a new feature in 5.6.
To allow scripts to run on older versions insert the line:
$LOG = IO::Handle->new;
--
\\ ( )
. _\\__[oo
.__/ \\ /\@
. l___\\
# ll l\\
###LL LL\\
------------------------------
Date: Wed, 27 Sep 2000 13:21:49 +0200
From: tony@svanstrom.com (Tony L. Svanstrom)
Subject: Re: Recursion in Perl
Message-Id: <1ehmcv5.9cdubc1ep37f9N%tony@svanstrom.com>
Swamy Ananthanarayan <anants@rpi.edu> wrote:
> Is there any way to perform recursion in perl? I would like a function to
> call itself everytime it hits a directory.
"All" you have to do is to figure out how the things move around in your
script and then use a fitting combination of my/local-like stuff. Easy,
huh? ;-)
/Tony
--
/\___/\ Who would you like to read your messages today? /\___/\
\_@ @_/ Protect your privacy: <http://www.pgpi.com/> \_@ @_/
--oOO-(_)-OOo---------------------------------------------oOO-(_)-OOo--
on the verge of frenzy - i think my mask of sanity is about to slip
---ôôô---ôôô-----------------------------------------------ôôô---ôôô---
\O/ \O/ ©99-00 <http://www.svanstrom.com/?ref=news> \O/ \O/
------------------------------
Date: Wed, 27 Sep 2000 08:26:47 GMT
From: gumbygumbygumby@my-deja.com
Subject: Re: regex problem
Message-Id: <8qsb02$e5k$1@nnrp1.deja.com>
In article <8qrrop$2mk$1@nnrp1.deja.com>,
Manuel Ho <mslho@my-deja.com> wrote:
> suppose i have a string like this:
>
> $myPattern = #...(garbage)#...(garbage)#...(garbage)#... etc
>
> how should i write the regex such that $1
> will be everything except the (garbage)?
if garbage always is the same chars, this will do
$myPattern =~ s/garbage\#/\#/g;
cheers.
***********************************************************************
* * My webpage about the author Tom Holt: *
* /_\ http://hem.passagen.se/gumby/holt/ *
* { ~._.~ } Bookreviews can be found at: http://go.to/10 *
* ( Y ) other things like SF/Fantasy-articles & biographies *
* ( )~*~( ) and heaps of musiclinks can be found at *
* (__)-(__) http://hem.passagen.se/gumby/ *
***********************************************************************
Sent via Deja.com http://www.deja.com/
Before you buy.
------------------------------
Date: Wed, 27 Sep 2000 12:00:23 GMT
From: Bart Lateur <bart.lateur@skynet.be>
Subject: Re: REGEX problem
Message-Id: <mao3tscejuqk4475f971m7oaojughkdh36@4ax.com>
Shawn and Francine wrote:
>I need to search a string and replace all instances of "." with a
>space.
tr/./ /;
or
s/\./ /g;
--
Bart.
------------------------------
Date: Wed, 27 Sep 2000 10:55:14 +0100
From: "Nicolas MONNET" <nico@monnet.to>
Subject: Re: Salary Range for Perl Programmers
Message-Id: <nIiA5.84$S3.2876@tengri.easynet.fr>
What the fuck was Tom Briles <sariq@texas.net> trying to say:
> Any class that allows its students to leave calling 'Perl' 'PERL' isn't
> worth two cents, much less four hundred bucks.
It's spelled A-N-A-L R-E-T-E-N-T-I-V-E.
--
perl -e 'print `echo Just a Lame Perl Luser | gzip -9 | cat | gzip -cd`'
------------------------------
Date: Wed, 27 Sep 2000 09:52:04 +0100
From: Matthew Couchman <Matthew.Couchman@bbsrc.ac.uk>
Subject: Re: Setting cookies with CGI.pm
Message-Id: <39D1B533.C024B18B@bbsrc.ac.uk>
Hmmm, maybe I need to include more details. I have indeed read the the docs,
specifically %man CGI and %man CGI::Cookie and on the basis of what I read
there I have some code which does work to some extent:
#!/usr/local/bin/perl
use strict;
use CGI qw(:standard);
use CGI::Cookie;
# Get cookie
my %cookies = fetch CGI::Cookie; # fetch all cookies from
~/.netscape/cookies into a hash
my $key = 'a_key';
# clear shopping list
print "before: ".$cookies{$key}->value()."\n".br(); # successfully prints
the value of $cookie{$key}
$cookies{$key}->value(""); # reset
the cookie to empty string
$cookies{$key}->expires("-1d"); # set cookie
to expire yesterday (ASAP)
print "after: ".$cookies{$key}->value()."\n".br(); # successfully
prints that the cookie is now empty
##### end of code fragment #####
So the code works as far as it goes. All I need to know is how to send the
results of these transactions back to the cookies file. Thanks,
Matt.
Anders Lund wrote:
> Matthew Couchman wrote:
>
> > Hello,
> >
> > I'm using CGI.pm to get, then set the value of a cookie. I can get the
> > cookie fine and then i'm trying to set it to 0 using the line:
> >
> > $cookies{$key}->value("");
>
> I dont think that whatever is in $cookies{$key} has an object method
> value($) ;-))
>
> If you wish to store a list of cookies in a hash, you may wish to read the
> perlref docs,
>
> $perldoc perlref
>
> $c = $query->cookie($cookiename); # get the value of a named cookie
> # compute a new value...
> ...
> # print the header with the new value
> print $query->header(-cookie(-name=>$cookiename, -value=>$value,
> path=>$path);
> ...
>
> Btw, did you think about reading the docs? try
> $perldoc CGI
> to view the CGI docs. Less offers nice search features, so you could read
> the less manual to figure out how to search for information on cookies if
> you use perldoc in a real (= *X) OS...
>
> Btw, you are using the -w switch, and of cause the strict pragma, right?
>
> -anders
>
> --
> [ the word wall - and the trailing dot - in my email address
> is my _fire_wall - protecting me from the criminals abusing usenet]
------------------------------
Date: Wed, 27 Sep 2000 12:48:19 GMT
From: Tim Richardson <ter@my-deja.com>
Subject: Re: Setting cookies with CGI.pm
Message-Id: <8qsqah$ou5$1@nnrp1.deja.com>
In article <39D1B533.C024B18B@bbsrc.ac.uk>,
Matthew Couchman <Matthew.Couchman@bbsrc.ac.uk> wrote:
> Hmmm, maybe I need to include more details. I have indeed read the the
docs,
> specifically %man CGI and %man CGI::Cookie and on the basis of what I
read
>
Well, the evidence is still that you have not read the documentation
very well :-) (meant warmly, I'm not exactly a saint on this point).
I say this purely because I still did not see the essential
print $query->header(-cookie=>$cookie);
method in use.
Without this, the browser has no idea that you have cookies in your
scheme of things.
There is a wonderful document included in the distribution of this
module called
lwpcook
In the latest ActiveState perl distribution, this appears incorrectly in
the 'pragmas' section of the documentation.
This document is a marvellous addition to the already excellent
documentation for this module. It stands for 'cookbook'.
regards,
--
Tim Richardson (search string: qweeblebeast)
Sent via Deja.com http://www.deja.com/
Before you buy.
------------------------------
Date: 27 Sep 2000 08:52:39 +0100
From: nobull@mail.com
Subject: Re: Syslog module problems
Message-Id: <u9aecu9sqg.fsf@wcl-l.bham.ac.uk>
"Frank Sonnemans" <fs.mail@wanadoo.be> writes:
> I tried to set the logmask priority using the following:
>
> use Sys::Syslog require 'syslog.ph'
>
> $maskpri = &LOG_UPTO(&LOG_WARNING);
> $oldmask = setlogmask($maskpri);
I just piped that through "perl -c" and, not supprisingly, it failed
the syntax check.
Could you show us some actual code that manifests the problem you
desribe.
> However I continuously get "&main::LOG_WARNING not defined". What am I
> doing wrong. I checked syslog.ph and it does define the LOG_WARNING
> function.
A required file is only loaded the first time it is encountered. A
required file that modifies the symbol table package in which it is
required will only modify the symbol table of the _first_ package to
require it - in this case Sys::Syslog:: not main::.
You could try &Sys::Syslog::LOG_WARNING but I don't know if this is
the approved idiom.
--
\\ ( )
. _\\__[oo
.__/ \\ /\@
. l___\\
# ll l\\
###LL LL\\
------------------------------
Date: Wed, 27 Sep 2000 12:38:52 GMT
From: aravindh@technologist.com
Subject: Re: system("cd /var") command
Message-Id: <8qspos$of6$1@nnrp1.deja.com>
I tried using chdir. But i am getting the same result - the directory
does not change. any other way of doing this.
thanks
aravindh
In article <8qdgvn$g7o$1@mozo.cc.purdue.edu>,
wjohnson@roger.ecn.purdue.edu (Wyatt R Johnson) wrote:
> In article <8qdg4q$7tm$1@nnrp1.deja.com>,
<aravindh@technologist.com> wrote:
> >Hi,
> >
> >I want to execute the unix command - cd /var/ within perl. I know I
> >should be doing system("cd /var/") or system("cd \/var\/") command.
but
> >don't seem to work. how can i do this?
> >
> >thanks
> >aravindh
> >
> >
> >Sent via Deja.com http://www.deja.com/
> >Before you buy.
>
> From the Unix side, a system() call spawns a new shell. The new shell
will
> cd into /var. The system call ends, and the new shell that you just
created
> dies. Your program thus wont be that directory.
>
> Try using chdir instead
>
> Wyatt
>
Sent via Deja.com http://www.deja.com/
Before you buy.
------------------------------
Date: 26 Sep 2000 21:35:17 +0100
From: Jonathan Stowe <gellyfish@gellyfish.com>
Subject: Re: tekboard.cgi
Message-Id: <8qr1a5$r8a$1@orpheus.gellyfish.com>
On Mon, 25 Sep 2000 17:17:32 +0100 Tigz wrote:
> I have just downloaded tekboard.cgi, in the demonstration found here
> http://www.hail.icestorm.com/metertek/cgi-bin/scripts/tekboard.cgi if its a
> new message it displays a diffrent gif/gpg, how can i do this?
>
Alter the program to do it. If you need more help you consider asking
the author.
/J\
--
yapc::Europe in assocation with the Institute Of Contemporary Arts
<http://www.yapc.org/Europe/> <http://www.ica.org.uk>
------------------------------
Date: 26 Sep 2000 21:50:40 +0100
From: Jonathan Stowe <gellyfish@gellyfish.com>
Subject: Re: WorkFromWhereYouARE-PERL-JAVA-JS-CSS-DreamWeaver
Message-Id: <8qr270$r9a$1@orpheus.gellyfish.com>
On 26 Sep 2000 14:01:36 -0500 PerlTelecommuter@perljavaglobal.com wrote:
> *** post for free via your newsreader at post.newsfeeds.com ***
>
> *** TELE COMMUTE ONLY ****
>
> WEB PAGE PROGRAMMER
>
Mr Adler is away from his computer right now please could you use Deja
news to find the appropriate postings explaining why job postings
are not welcome in most places on usenet.
/J\
--
yapc::Europe in assocation with the Institute Of Contemporary Arts
<http://www.yapc.org/Europe/> <http://www.ica.org.uk>
------------------------------
Date: 16 Sep 99 21:33:47 GMT (Last modified)
From: Perl-Users-Request@ruby.oce.orst.edu (Perl-Users-Digest Admin)
Subject: Digest Administrivia (Last modified: 16 Sep 99)
Message-Id: <null>
Administrivia:
The Perl-Users Digest is a retransmission of the USENET newsgroup
comp.lang.perl.misc. For subscription or unsubscription requests, send
the single line:
subscribe perl-users
or:
unsubscribe perl-users
to almanac@ruby.oce.orst.edu.
| NOTE: The mail to news gateway, and thus the ability to submit articles
| through this service to the newsgroup, has been removed. I do not have
| time to individually vet each article to make sure that someone isn't
| abusing the service, and I no longer have any desire to waste my time
| dealing with the campus admins when some fool complains to them about an
| article that has come through the gateway instead of complaining
| to the source.
To submit articles to comp.lang.perl.announce, send your article to
clpa@perl.com.
To request back copies (available for a week or so), send your request
to almanac@ruby.oce.orst.edu with the command "send perl-users x.y",
where x is the volume number and y is the issue number.
For other requests pertaining to the digest, send mail to
perl-users-request@ruby.oce.orst.edu. Do not waste your time or mine
sending perl questions to the -request address, I don't have time to
answer them even if I did know the answer.
------------------------------
End of Perl-Users Digest V9 Issue 4443
**************************************
