Re: [Nms-cgi-devel] problems with nms-cgi formmail.pl

[Jonathan S. <gel...@ge...>]

On Sun, 18 Nov 2001, iain truskett wrote:

> * Jonathan Stowe (gel...@ge...) [16 Nov 2001 21:45]:
>
> > I have a feeling that most of the scripts suffer from this problem
> > unfortunately we do have to consider the compatibility with the legacy
> > of the Existing Body Of Matts Scripts ....
>
> Given the ease with which CGI.pm allows people to just access param()
> without worrying whether it's POSTed or GETed (maybe 'GOT') it's
> possible that quite a few scripts in the world have this problem.
>

Absolutely - I am probably as guilty of this as anyone but it is something
that should be considered - bear in mind that most of the work that we are
reviewing goes straight to $ENV{QUERY_STRING} without considering the
request method :)

> [snip about 'mv and rename' method of changing guestbook.html]
> > I have a version of guestbook.pl that does this but is so vastly different
> > from the version in CVS that I am holding off on it.
>
> Yes, well, mine uses Mason and a postgresql backend, so is very
> inappropriate.
>

Er, we'll save that for a later upgrade :)

> Does Apache pay any attention to any form of file locking? (Probably
> safe to say that even if IIS does, it would be a bugger locking the
> file.)

No. That is why the write to temporary file and mv is the only solution -
the web server doesnt respect a flock() on the requested files ...

/J\
-- 
Jonathan Stowe                      |
<http://www.gellyfish.com>          |      This space for rent
                                    |