RE: [Owasp-input-api-developers] Status?

[Steven J. S. <sj...@Ju...>]

On Tue, 2 Apr 2002, Christopher Todd wrote:

> Has there been any discussion of writing an Apache module (for the webserver
> plugin approach)?  That would cover a lot of web app engine ground,
> including PHP, PERL, ChiliASP, and even Java (with JServ/Tomcat apache
> plugins).

I'm not sure how we'd manage that. With a $LANGUAGE plugin or module you
can use $LANGUAGE-specific functions to manipulate data. With an Apache
API/NSAPI/ISAPI server module you'd have to do everything before the
scripting engine - whether it be PHP, JSP, ASP or anything else - would
have a chance to touch the data, and it would allow MUCH less flexibility.
My vision for this project is that we want to empower people to write more
secure web applications. I don't think a server module is the best way to
do that. I know it'll be more work, but my opinion is that the best thing
to do is to create modules for the most popular scripting platforms.

Just my $0.02...

-- 
Steve Sobol, CTO (Server Guru, Network Janitor and Head Geek)
JustThe.net LLC, Mentor On The Lake, OH  888.480.4NET   http://JustThe.net
Need a programmer? Resume going up at http://sourceforge.net/users/webdude216