Slash

On Fri, 10 Aug 2001, Xiaowu Gai wrote:

> Hi everyone:
>
> I am writing a script that has to use fileupload. I had slashcode installed
> on my machine. The script works if I place on a different machine (same as
> mine except does not have slashcode installed). However, when I tried to
> run the same script from my machine under the slash htdocs directory where
> the other slash scripts are placed. I could not make it to work. It won't
> be able to read the file that I upload. Does anyone has a clue as to what
> can be wrong and how I can fix it. Thank you.
>

Well first off, which version of slash are you using?  We modified
the version 1.x version submit.pl to handle file uploads, and we had
several problems getting it working, mostly because there is are several
places where limits are placed on the size of an incoming request.

Ultimately what it came down to was an apache directive, LimitRequestBody,
which needed to be set appropriately in httpd.conf to accept files of the
correct size.  If you're using slash 2.0, all bets are off, as we haven't
ported all of stuff to slash 2.0 yet, but it's possible that it's the same
problem.

-Rod

-- 

_________________________________________________________________
|Rodney S. Heyd                  |Arizona State University-1504  |
|Web and System Administrator    |Dept. of Physics and Astronomy |
|ECEPT,ACEPT                     |Tempe, Arizona  85287-1504     |
|heyd@...                    |PHONE: (480) 727-6291          |
|http://www.ecept.net/           |FAX:   (480) 727-6019          |
|http://acept.asu.edu/           |                               |
------------------------------------------------------------------

Hi Rod:

Yes, I am using 2.0. Sorry I forgot to mention this. I actually noticed 
that the default httpd.conf does not have an entry like LimitQuestBody, 
which is added in slash.conf, though. Is there any reason why slash does 
this. I placed my script in the original apache cgi-bin and it worked fine 
for read and returning smaller files, but failed when I tried with a big 
file. That is how I noticed the LimitRequestBody thing. I commented out the 
entry in the slash.conf file and it worked just fine. I am bit nervous, 
though, since I knows slash must do this for a reason.

Again, thank you for your help.

Xiaowu

At 01:03 PM 8/10/2001 -0700, you wrote:
>On Fri, 10 Aug 2001, Xiaowu Gai wrote:
>
> > Hi everyone:
> >
> > I am writing a script that has to use fileupload. I had slashcode installed
> > on my machine. The script works if I place on a different machine (same as
> > mine except does not have slashcode installed). However, when I tried to
> > run the same script from my machine under the slash htdocs directory where
> > the other slash scripts are placed. I could not make it to work. It won't
> > be able to read the file that I upload. Does anyone has a clue as to what
> > can be wrong and how I can fix it. Thank you.
> >
>
>Well first off, which version of slash are you using?  We modified
>the version 1.x version submit.pl to handle file uploads, and we had
>several problems getting it working, mostly because there is are several
>places where limits are placed on the size of an incoming request.
>
>Ultimately what it came down to was an apache directive, LimitRequestBody,
>which needed to be set appropriately in httpd.conf to accept files of the
>correct size.  If you're using slash 2.0, all bets are off, as we haven't
>ported all of stuff to slash 2.0 yet, but it's possible that it's the same
>problem.
>
>-Rod
>
>--
>
>_________________________________________________________________
>|Rodney S. Heyd                  |Arizona State University-1504  |
>|Web and System Administrator    |Dept. of Physics and Astronomy |
>|ECEPT,ACEPT                     |Tempe, Arizona  85287-1504     |
>|heyd@...                    |PHONE: (480) 727-6291          |
>|http://www.ecept.net/           |FAX:   (480) 727-6019          |
>|http://acept.asu.edu/           |                               |
>------------------------------------------------------------------
>
>
>_______________________________________________
>Slashcode-general mailing list
>Slashcode-general@...
>http://lists.sourceforge.net/lists/listinfo/slashcode-general

Xiaowu Gai, PhD
Associate Scientist
L. H. Baker Center for Bioinformatics and Biostatistics
Iowa State University
Ames, IA 50011
Phone: (515) 294-7624
Email: xgai@...

Rodney Heyd wrote:
> Well first off, which version of slash are you using?  We modified
There is a patch acs did for this (works on version 2.0 I 
believe, look at SF).

I am hoping to put this in 2.2 before we ship it.

	-Brian

On Fri, 10 Aug 2001, Xiaowu Gai wrote:

> Hi Rod:
>
> Yes, I am using 2.0. Sorry I forgot to mention this. I actually noticed
> that the default httpd.conf does not have an entry like LimitQuestBody,
> which is added in slash.conf, though. Is there any reason why slash does
> this. I placed my script in the original apache cgi-bin and it worked fine
> for read and returning smaller files, but failed when I tried with a big
> file. That is how I noticed the LimitRequestBody thing. I commented out the
> entry in the slash.conf file and it worked just fine. I am bit nervous,
> though, since I knows slash must do this for a reason.
>
> Again, thank you for your help.
>

Xiaowu,

Yeah, that was exactly the same behavior that we saw.  As for why slash
sets it?  I haven't asked CmdrTaco, et al, but I suspect they set it
because leaving that max request open is a nice recipe for a denial of
service attack.  Think of it this way, if there is no limit, then someone
could just start sending *huge* requests to your server that would
eventually cause it to crash.  On my setup, I just kind of took an
educated guess at what I thought the max file size would be, based on
the type of files we were accepting, and then set the LimitRequestBody
slightly higher than my expectations.

It's worked pretty well so far...

-Rod Heyd

-- 

_________________________________________________________________
|Rodney S. Heyd                  |Arizona State University-1504  |
|Web and System Administrator    |Dept. of Physics and Astronomy |
|ECEPT,ACEPT                     |Tempe, Arizona  85287-1504     |
|heyd@...                    |PHONE: (480) 727-6291          |
|http://www.ecept.net/           |FAX:   (480) 727-6019          |
|http://acept.asu.edu/           |                               |
------------------------------------------------------------------