You can subscribe to this list here.
2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(23) |
Dec
(9) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
(32) |
Feb
(23) |
Mar
(23) |
Apr
(11) |
May
(19) |
Jun
(8) |
Jul
(28) |
Aug
(19) |
Sep
(11) |
Oct
(8) |
Nov
(39) |
Dec
(22) |
2002 |
Jan
(14) |
Feb
(64) |
Mar
(14) |
Apr
(28) |
May
(25) |
Jun
(34) |
Jul
(26) |
Aug
(88) |
Sep
(66) |
Oct
(26) |
Nov
(16) |
Dec
(22) |
2003 |
Jan
(18) |
Feb
(16) |
Mar
(20) |
Apr
(20) |
May
(26) |
Jun
(43) |
Jul
(42) |
Aug
(22) |
Sep
(41) |
Oct
(37) |
Nov
(27) |
Dec
(23) |
2004 |
Jan
(26) |
Feb
(9) |
Mar
(40) |
Apr
(24) |
May
(26) |
Jun
(56) |
Jul
(15) |
Aug
(19) |
Sep
(20) |
Oct
(30) |
Nov
(29) |
Dec
(10) |
2005 |
Jan
(1) |
Feb
(2) |
Mar
(1) |
Apr
|
May
|
Jun
(3) |
Jul
(6) |
Aug
|
Sep
(4) |
Oct
(1) |
Nov
(1) |
Dec
(1) |
2006 |
Jan
(10) |
Feb
(6) |
Mar
(10) |
Apr
(9) |
May
(4) |
Jun
(1) |
Jul
(2) |
Aug
(6) |
Sep
(1) |
Oct
(1) |
Nov
(11) |
Dec
|
2007 |
Jan
(4) |
Feb
|
Mar
(2) |
Apr
|
May
|
Jun
(5) |
Jul
(1) |
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2008 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2009 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2010 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
|
May
|
Jun
(1) |
Jul
(1) |
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2011 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
2012 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
(1) |
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
(1) |
Nov
|
Dec
|
2013 |
Jan
|
Feb
(1) |
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
|
Aug
(3) |
Sep
|
Oct
|
Nov
|
Dec
|
2014 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
(1) |
Nov
|
Dec
|
2015 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
(1) |
Aug
|
Sep
|
Oct
(1) |
Nov
(19) |
Dec
(3) |
2016 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2017 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
2018 |
Jan
|
Feb
(1) |
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2019 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
|
Aug
(1) |
Sep
(2) |
Oct
|
Nov
|
Dec
|
2020 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
|
Dec
|
2021 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
From: Wart <wa...@ko...> - 2004-09-09 06:18:53
|
I'm trying to develop an updated spec file for tclhttpd so that it can be included in future Fedora releases. While testing out the packaging, I noticed that tclhttpd has a binary file checked into cvs: htdocs/cgi-bin/env What is this file used for, and why is it in CVS as a binary file instead of compiling it from source? The inclusion of this file wreaks havoc on the rpm dependency list because it generates a requirement on libc.so.1, which isn't part of any recent Fedora/Redhat distributions. --Wart |
From: David G. <dav...@po...> - 2004-09-04 20:57:49
|
I found a way to register an RSS channel for when content is changed, but the details are beyond me. Anyone know the details of cloud? Parsing the info out of a supported feed is easy, but then what do I do with it and how do I receive the alert to my caching system? Could someone point me in the right direction for the HTTP-POST method? http://blogs.law.harvard.edu/tech/soapMeetsRss#rsscloudInterface -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-29 20:44:53
|
David Gravereaux <dav...@po...> wrote: >How do I change the encoding a page is served-out as? I'm getting data >loss as my page generating sources give full unicode. Is there a way from >the template file to manipulate the MIME header info and the encoding on >the actual socket channel for the Httpd_ReturnData? Never mind.. I discovered what I was doing wrong. pseudo code to explain why: <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> ... [encoding convertto utf-8 [MyProcThatReturnsUnicode]] ... </html> I had forgotten that a channel whose encoding is iso8859-1 is essentially a pass-thru. If I convert from the internal rep to utf-8 and claim it as utf-8 in the meta data of the file served, as is well. -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-27 08:01:48
|
How do I change the encoding a page is served-out as? I'm getting data loss as my page generating sources give full unicode. Is there a way from the template file to manipulate the MIME header info and the encoding on the actual socket channel for the Httpd_ReturnData? -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-24 07:08:21
|
"Jeff Rankin" <Jr...@on...> wrote: >Hi David: > >Attached is an example using tDOM and The Tcler's Wiki RSS feed. It should work with NPR's RSS feed as well. > >- Jeff Thanks Jeff, Very cool and simple. An excellent starting point for me. >________________________________ > >From: tcl...@li... on behalf of David Gravereaux >Sent: Thu 8/19/2004 5:58 PM >To: tcl...@li... >Subject: [Tclhttpd-users] How to process an RSS feed in a template? > > > >Ok, Say I want to do an http::getUrl on >http://www.npr.org/rss/rss.php?topicId=2 while generating a page from a >template on the server. How do I make the XML into a formatted table all >dynamically? Yes, I've never done this before. -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-24 06:20:47
|
Brent Welch <we...@pa...> wrote: >The 302 redirect is visible to the browser, and any web crawler, >so that method will "leak" your IP address. It may also be possible >to configure their server to do an internal redirect that essentially >forwards the request to you. Yes, pobox offers that for extra $$/year to act as a pure proxy. I was just wondering if there was some magic somewhere to assert it back I wasn't aware of. >For a moment I thought their might be a dual to the "Name:" request >header you could use in a reply, but I checked the RFC and I didn't >see anything. Thanks for looking. >>>>David Gravereaux said: > > Hi, > > > > I'm running tclhttpd on my home LAN accessible from the outside. I > > publicize it as http://www.pobox.com/~davygrvy/... and pobox redirects it > > (302) to my IP address dropping one level of the path. It works, but the > > address know to the browser has changed to http://66.92.250.232/... > > I didn't care before, but now google has in their database as > > http://66.92.250.232/.. (the actual) when I would prefer it the other >way. > > > > Is it possible to configure tclhttpd to maintain the address as > > http://www.pobox.com/~davygrvy/... at my end somehow? > > -- > > David Gravereaux <dav...@po...> > > [species: human; planet: earth,milkyway(western spiral arm),alpha sector] -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: Brent W. <we...@pa...> - 2004-08-24 02:31:52
|
If this amounts to much more than adding package require commands, keep us informed of the issues. I hope it doesn't require anything major. I don't see the need for a branch, but again, if it looks like there will be major upheaval, check with me before we take drastic action. >>>Colin McCormack said: > I would like to undertake the task suggested by Akupries here: > http://sourceforge.net/tracker/index.php?func=detail&aid=753528&group_id= 128 84&atid=112884 > > The task would make lib/* closed under [package require] so that > requiring a package would require all of its dependencies. > > I think the benefits are that it would be far simpler to configure a > 'minimal' tclhttpd by only selecting the packages one requires. It'd > make tclhttpd more 'modular' > > Any objections to my attempting to clean the stables? I might have to > redirect a river or two :) Would it be better if I undertook this on a > new development branch of CVS? > -- > Colin McCormack <co...@ch...> > > > ------------------------------------------------------- > SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media > 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 > Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. > http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 > _______________________________________________ > TclHttpd-users mailing list > Tcl...@li... > https://lists.sourceforge.net/lists/listinfo/tclhttpd-users > -- Brent Welch Software Architect, Panasas Inc Delivering the premier storage system for scalable Linux clusters www.panasas.com we...@pa... |
From: Brent W. <we...@pa...> - 2004-08-24 02:26:52
|
The 302 redirect is visible to the browser, and any web crawler, so that method will "leak" your IP address. It may also be possible to configure their server to do an internal redirect that essentially forwards the request to you. For a moment I thought their might be a dual to the "Name:" request header you could use in a reply, but I checked the RFC and I didn't see anything. >>>David Gravereaux said: > Hi, > > I'm running tclhttpd on my home LAN accessible from the outside. I > publicize it as http://www.pobox.com/~davygrvy/... and pobox redirects it > (302) to my IP address dropping one level of the path. It works, but the > address know to the browser has changed to http://66.92.250.232/... > I didn't care before, but now google has in their database as > http://66.92.250.232/.. (the actual) when I would prefer it the other way. > > Is it possible to configure tclhttpd to maintain the address as > http://www.pobox.com/~davygrvy/... at my end somehow? > -- > David Gravereaux <dav...@po...> > [species: human; planet: earth,milkyway(western spiral arm),alpha sector] > > > ------------------------------------------------------- > SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media > 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 > Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. > http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 > _______________________________________________ > TclHttpd-users mailing list > Tcl...@li... > https://lists.sourceforge.net/lists/listinfo/tclhttpd-users > -- Brent Welch Software Architect, Panasas Inc Delivering the premier storage system for scalable Linux clusters www.panasas.com we...@pa... |
From: Colin M. <co...@ch...> - 2004-08-23 02:41:09
|
I would like to undertake the task suggested by Akupries here: http://sourceforge.net/tracker/index.php?func=detail&aid=753528&group_id=12884&atid=112884 The task would make lib/* closed under [package require] so that requiring a package would require all of its dependencies. I think the benefits are that it would be far simpler to configure a 'minimal' tclhttpd by only selecting the packages one requires. It'd make tclhttpd more 'modular' Any objections to my attempting to clean the stables? I might have to redirect a river or two :) Would it be better if I undertook this on a new development branch of CVS? -- Colin McCormack <co...@ch...> |
From: Jeff R. <Jr...@on...> - 2004-08-21 15:17:22
|
W0RvY19EeW5hbWljXQoKWwpwYWNrYWdlIHJlcXVpcmUgaHR0cApwYWNrYWdlIHJlcXVpcmUgdGRv bQoKc2V0IHRva2VuIFtodHRwOjpnZXR1cmwgaHR0cDovL21pbmkubmV0L3RjbC9yc3MueG1sXQpz ZXQgcnNzX3htbCBbaHR0cDo6ZGF0YSAkdG9rZW5dCgpodG1sOjpzZXQgZG9jIFtkb20gcGFyc2Ug JHJzc194bWxdCmh0bWw6OnNldCByb290IFskZG9jIGRvY3VtZW50RWxlbWVudF0KaHRtbDo6c2V0 IHN0b3JpZXMgWyRyb290IHNlbGVjdE5vZGVzIC9yc3MvY2hhbm5lbC9pdGVtXQpdCgpbaHRtbDo6 aGVhZCB7UlNTIEV4YW1wbGV9XQoKPHN0eWxlIHR5cGU9InRleHQvY3NzIj4KICAgIGJvZHkgewog ICAgICAgIGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOwoJZm9udC1z aXplOiA4MCU7CiAgICB9CiAgICBoMSB7CiAgICAgICAgYmFja2dyb3VuZDogI2Y3ZjdmNzsKCXBh ZGRpbmc6IDRweDsKICAgIH0KICAgIGR0IHsKICAgICAgICBmb250LXNpemU6IDEyMCU7Cglmb250 LXdlaWdodDogYm9sZDsKICAgIH0KICAgIGRkIHsKICAgICAgICBtYXJnaW46IDEwcHg7CiAgICB9 Cjwvc3R5bGU+CgpbaHRtbDo6Ym9keVRhZ10KCltodG1sOjpoMSB7UlNTIEV4YW1wbGV9XQoKPGRs PgogICAgW2h0bWw6OmZvcmVhY2ggc3RvcnkgJHN0b3JpZXMgewogICAgICAgIDxkdD4KCSAgICA8 YSBocmVmPSJbWyRzdG9yeSBzZWxlY3ROb2RlcyBsaW5rL3RleHQoKV0gbm9kZVZhbHVlXSI+Cgkg ICAgICAgIFtbJHN0b3J5IHNlbGVjdE5vZGVzIHRpdGxlL3RleHQoKV0gbm9kZVZhbHVlXQoJICAg IDwvYT4KICAgICAgICAgICAgPHNwYW4gc3R5bGU9ImNvbG9yOiAjOTk5OTk5OyI+CgkgICAgICAg IChbWyRzdG9yeSBzZWxlY3ROb2RlcyBwdWJEYXRlL3RleHQoKV0gbm9kZVZhbHVlXSkKCSAgICA8 L3NwYW4+Cgk8L2R0PgoJPGRkPltbJHN0b3J5IHNlbGVjdE5vZGVzIGRlc2NyaXB0aW9uL3RleHQo KV0gbm9kZVZhbHVlXTwvZGQ+CiAgICB9XQo8L2RsPgoKW2h0bWw6OmVuZF0K |
From: <aku...@sh...> - 2004-08-20 05:38:26
|
11'th Annual Tcl/Tk Conference October 11 - 15, 2004 New Orleans, Louisiana, USA Email Contact tc...@tc... We are pleased to announce the 11'th Annual Tcl/Tk conference (Tcl'2004), sponsored by Noumena Corporation, in cooperation with ActiveState and ExpoTech. Come to New Orleans to: * Learn about the power of Tcl/Tk. * Present exciting new work involving Tcl/Tk. * See the latest developments in Tcl/Tk. * Meet Tcl/Tk researchers and users from academia, government and industry. * Plan for future Tcl/Tk related developments. The conference program will include paper presentations, tutorials, Birds of a Feather (BOF) sessions and invited key-note talks. Registration Online registration is ready now. <http://www.tcl.tk/community/tcl2004/reg.html> Tutorials Come learn about Tcl from the experts. This year's Tcl/Tk Conference includes one of the best sets of Tutorials ever offered including tutorials on Jacl, TclHttpd, Starkit, Advanced GUI construction, and the API. <http://www.tcl.tk/community/tcl2004/tut2004.html> Schedule More details will be added to the schedule as they become available. <http://www.tcl.tk/community/tcl2004/schedule.html> Those attending the conference will be interested in the conference info page. <http://www.tcl.tk/community/tcl2004/info.html> To keep in touch with news regarding the conference and Tcl events in general, subscribe to the tcl-announce list. <http://listserv.activestate.com/mailman/mysubs?show=announce> Other Forms of Participation For those who are not presenting a paper at the conference, but would like to present their work in some form, we do provide several other forms of participation. Slots for Works-in-Progress (WIP) presentations and Birds-of-a-Feather sessions (BOFs) are available on a first-come, first-served basis by sending email to tc...@tc.... Some WIP and BOF time slots will be held open for on-site reservation, so we encourage all attendees with interesting work in progress to consider presenting that work at the conference. Conference Committee Gerald Lester HMS Software General Chair Andreas Kupries ActiveState Corp Clif Flynt Noumena Corp Website Admin Jeffrey Hobbs ActiveState Corp Kevin Kenny GE Global Research Center Ken Jones Avia Training Mac Cody Raytheon Company Kim Richerts Steve Landers Digital Smarties Sheila Miguez Motorola Larry Virden Tcl FAQ Maintainer Contact Information tc...@tc... |
From: Colin M. <co...@ch...> - 2004-08-20 00:51:43
|
On Fri, 2004-08-20 at 10:28, David Gravereaux wrote: > Colin McCormack <co...@ch...> wrote: > > >On Fri, 2004-08-20 at 07:58, David Gravereaux wrote: > I tried browsing around for examples, but couldn't find anything useful... > Just blogs linking to other blogs and back around again. Yes. Here's a content-ful example/tutorial - the result looks nice too, I think he's just taking direct rss xml and throwing in a CSS style sheet: http://developer.apple.com/internet/webcontent/xmltransformations.html > While doing it, I thought.. Hey this is Tcl.. The more server-side work > I can do to simplify it into HTML 4.01 (or whatever), the less browser > requirements I need. > That feed is done in javascript on the client-side. I think I want to try > a pure server-side way. Mostly for fun, just to see how to do it. Yep, if you want to transform it on the server, then CSS won't help at all. Useful if you want to extract data from it (although I haven't noticed that RSS feeds contain all that much data as such :) > I'm off and running. Yes, it does help. I'm set for now, but as yet I > don't understand the difference between the RSS versions (0.91, 2.0.1, > etc.) and what all the contents of RDF are and what it all means.. No idea. I was thinking of generalising wikit over mkvfs into a blog supporting form for tclhttpd, but beyond that I'm completely ignorant. -- Colin McCormack <co...@ch...> |
From: David G. <dav...@po...> - 2004-08-20 00:28:08
|
Colin McCormack <co...@ch...> wrote: >On Fri, 2004-08-20 at 07:58, David Gravereaux wrote: >> Ok, Say I want to do an http::getUrl on >> http://www.npr.org/rss/rss.php?topicId=2 while generating a page from a >> template on the server. How do I make the XML into a formatted table all >> dynamically? Yes, I've never done this before. > >You know, since RSS is XML, and since XML can be formatted with CSS, you >can actually just slap a stylesheet into the RSS (as a PI <? ?>) and let >the browser do the formatting for you. I saw this technique on the net, >but haven't tracked it closely, here's one apparent tutorial I dug up >just now: http://www.crystalflame.net/2003/12/rss_with_css.html I tried browsing around for examples, but couldn't find anything useful... Just blogs linking to other blogs and back around again. While doing it, I thought.. Hey this is Tcl.. The more server-side work I can do to simplify it into HTML 4.01 (or whatever), the less browser requirements I need. What started me thinking about RSS was the feed that Sophus does for the latest virii info: http://www.sophos.com/virusinfo/infofeed/more.html That feed is done in javascript on the client-side. I think I want to try a pure server-side way. Mostly for fun, just to see how to do it. Off the wiki RSS page, I'm getting this to do stuff with some edits: http://neko.homeunix.net/~petterik/rss.cgi >It can work really nicely, the pages under >http://sharedtech.dyndns.org/~colin/treecl/docs/ are all pure XML with >CSS style. > >Hope this helps. I'm off and running. Yes, it does help. I'm set for now, but as yet I don't understand the difference between the RSS versions (0.91, 2.0.1, etc.) and what all the contents of RDF are and what it all means.. Fun stuff. -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: Colin M. <co...@ch...> - 2004-08-19 23:00:37
|
On Fri, 2004-08-20 at 07:58, David Gravereaux wrote: > Ok, Say I want to do an http::getUrl on > http://www.npr.org/rss/rss.php?topicId=2 while generating a page from a > template on the server. How do I make the XML into a formatted table all > dynamically? Yes, I've never done this before. You know, since RSS is XML, and since XML can be formatted with CSS, you can actually just slap a stylesheet into the RSS (as a PI <? ?>) and let the browser do the formatting for you. I saw this technique on the net, but haven't tracked it closely, here's one apparent tutorial I dug up just now: http://www.crystalflame.net/2003/12/rss_with_css.html It can work really nicely, the pages under http://sharedtech.dyndns.org/~colin/treecl/docs/ are all pure XML with CSS style. Hope this helps. -- Colin McCormack <co...@ch...> |
From: David G. <dav...@po...> - 2004-08-19 22:56:37
|
Yup, that works.. I should always check the wiki about these things.. Thanks. Brett Schwarz <bre...@ya...> wrote: >Hey Dave, > >I've never tried it, but this link may help: > >http://wiki.tcl.tk/4341 > > --brett > >--- David Gravereaux <dav...@po...> wrote: > >> Ok, Say I want to do an http::getUrl on >> http://www.npr.org/rss/rss.php?topicId=2 while >> generating a page from a >> template on the server. How do I make the XML into >> a formatted table all >> dynamically? Yes, I've never done this before. >> -- >> David Gravereaux <dav...@po...> >> [species: human; planet: earth,milkyway(western >> spiral arm),alpha sector] >> >> >> >------------------------------------------------------- >> SF.Net email is sponsored by Shop4tech.com-Lowest >> price on Blank Media >> 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R >> for only $33 >> Save 50% off Retail on Ink & Toner - Free Shipping >> and Free Gift. >> >http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 >> _______________________________________________ >> TclHttpd-users mailing list >> Tcl...@li... >> >https://lists.sourceforge.net/lists/listinfo/tclhttpd-users >> > > -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-19 21:58:51
|
Ok, Say I want to do an http::getUrl on http://www.npr.org/rss/rss.php?topicId=2 while generating a page from a template on the server. How do I make the XML into a formatted table all dynamically? Yes, I've never done this before. -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: David G. <dav...@po...> - 2004-08-17 21:56:42
|
Hi, I'm running tclhttpd on my home LAN accessible from the outside. I publicize it as http://www.pobox.com/~davygrvy/... and pobox redirects it (302) to my IP address dropping one level of the path. It works, but the address know to the browser has changed to http://66.92.250.232/... I didn't care before, but now google has in their database as http://66.92.250.232/.. (the actual) when I would prefer it the other way. Is it possible to configure tclhttpd to maintain the address as http://www.pobox.com/~davygrvy/... at my end somehow? -- David Gravereaux <dav...@po...> [species: human; planet: earth,milkyway(western spiral arm),alpha sector] |
From: Nicolas B. <nic...@ma...> - 2004-08-02 10:24:21
|
Colin McCormack wrote: >On Mon, 2004-08-02 at 17:01, Nicolas Boretos wrote: > > >>The stuff below let's us play php as cgi... >>I only wonder if there's not a better hook to set and unset >>env(REDIRECT_STATUS)? Maybe grab the file extension >>and set/unset only then..? >> >> > >I was wondering, when I read your wiki page on this, what is going on >with REDIRECT_STATUS that it causes php problems? > > Hi Colin, AFAIU, from the php docs, seems many installs place the interp under cgi-bin, where CERT advisory CA-96.11 <http://www.cert.org/advisories/CA-1996-11.html> recommends against this... http://gr.php.net/security.cgi-bin They say that this would permit php to read files either outside of the docRoot, .../php?/etc/passwd.. or under docRoot .../php/secretdir/documents.html so they usually compile with a configuration option --enable-force-cgi-redirect <configure.php#configure.enable-force-cgi-redirect> to prevent this attack What I saw, with php outside the wevserver, was 1. if a .php page is in cgi-bin, then php does not compalin, but that would mean all php pages must reside there...not very convenient... 2. if a .php page is placed in directory under docroot, then it must be have a .cgi extension...., not very practical.. From what I've understood is that one can set the REDIRECT_STATUS variable while executing, that overides the above compile flag. Additionally, one should set the doc_root directory in the php.ini, thus disallowing php to read files outside of doc_root.... This is about as much as I kow 'bout php.... Anyway, I am not really sure whether this approach closes up the security problems with php, but it at least allows php files, to be executed under doc_root w/o the need for renaming them to .cgi... My question was basically whether there was a cleaner way to do this, e.g do this only when running php pages... regards, nicolas |
From: Colin M. <co...@ch...> - 2004-08-02 08:36:20
|
On Mon, 2004-08-02 at 17:01, Nicolas Boretos wrote: > The stuff below let's us play php as cgi... > I only wonder if there's not a better hook to set and unset > env(REDIRECT_STATUS)? Maybe grab the file extension > and set/unset only then..? I was wondering, when I read your wiki page on this, what is going on with REDIRECT_STATUS that it causes php problems? -- Colin McCormack <co...@ch...> |
From: Nicolas B. <nic...@ma...> - 2004-08-02 07:22:17
|
Hi again, Here's the complete CgiClose (need to add extensions...) proc CgiExec {script arglist} { global tcl_platform global Cgi switch -- $tcl_platform(platform) { unix { if {[file exists /dev/stdout]} { # This trick "2> /dev/stdout" fails if you start the process in # the background under an xterm, then quit the xterm. In that case # the open raises an error. if { ! [catch {open "|[list $script] $arglist 2> /dev/stdout" r+} pipe]} { return $pipe } } # We use cat to merge the stderr and stdout return [open "|[list $script] $arglist |& cat" r+] } windows { switch -- [file extension $script] { .pl { return [open "|[list $Cgi(perl) $script] $arglist" r+] } .php { return [open "|[list $Cgi(php) $script] $arglist" r+] } .php3 { return [open "|[list $Cgi(php) $script] $arglist" r+] } .phtml { return [open "|[list $Cgi(php) $script] $arglist" r+] } .cgi { return [open "|[list $Cgi(cgiexe) $script] $arglist" r+] } .tcl { return [open "|[list $Cgi(tclsh) $script] $arglist" r+] } .exe { return [open "|[list $script] $arglist" r+] } default { error "Don't know how to execute CGI $script" } } } macintosh { error "CGI not supported on Macintosh" } } } regards, nicolas |
From: Nicolas B. <nic...@ma...> - 2004-08-02 07:01:30
|
Hi, The stuff below let's us play php as cgi... I only wonder if there's not a better hook to set and unset env(REDIRECT_STATUS)? Maybe grab the file extension and set/unset only then..? ###Nikos: Hack to add php cgi capabilities into tclhttpd... #Edit cgi.tcl in the lib directory.., specifically CgiSpawn and CgiClose, essentially setting/unsetting env(REDIRECT_STATUS). #This is needed so PHP does not complain about security breach and stop execution. set REDIRECT_STATUS in CgiSpawn... proc CgiSpawn {sock script} { upvar #0 Httpd$sock data global env Cgi ##Nikos:This env var is needed to run php cgi securely, in directories under docroot set env(REDIRECT_STATUS) 1 if {$Cgi(cgi) >= $Cgi(maxcgi)} { Httpd_Error $sock 504 "Too many CGI's" blah...blah....... .... and unset in CgiClose ..... proc CgiClose {fd sock {bytes {}} {error {}}} { global Cgi upvar #0 Httpd$sock data catch {after cancel $data(cancel)} incr Cgi(cgi) -1 if {![info exists data(header)]} { ##Nikos:This env var was needed to run php cgi securely, now we unset it.. catch {unset env(REDIRECT_STATUS)} Httpd_Error $sock 204 } else { Httpd_SockClose $sock 1 ##Nikos:This env var was needed to run php cgi securely, now we unset it.. catch {unset env(REDIRECT_STATUS)} } if {[string length $error] > 0} { Log $sock CgiClose $error ##Nikos:This env var was needed to run php cgi securely, now we unset it.. catch {unset env(REDIRECT_STATUS)} } } ###php.tcl in custom directory.... ##Add the mime types Mtype_Add application/x-php .php Mtype_Add application/x-php .php3 Mtype_Add application/x-php .phtml ###Edit this your path, Win used to need full path; now it seems not to #set Cgi(php) "c:/php/php.exe" ;# For .php set Cgi(php) "php" ;# For .php proc Doc_application/x-php {path suffix sock} { upvar #0 Httpd$sock data Url_Handle [list CgiHandle $data(url) {} $path] $sock } proc Doc_application/x-php {path suffix sock} { upvar #0 Httpd$sock data Url_Handle [list CgiHandle $data(url) {} $path] $sock } puts "PHP CGI Stuff loaded" puts {You need to register your php cgi directories with Cgi_Directory} ### regards, nicolas |
From: Colin M. <co...@ch...> - 2004-07-29 12:47:50
|
Stephan Vogel's written WebDav for tclhttpd. http://www.vogel-nest.de/wiki.php/Main/WebDAV Cool. -- Colin McCormack <co...@ch...> |
From: Brent W. <we...@pa...> - 2004-07-20 21:38:20
|
I can't help but point out that you need to write a string that consumes all of the processes virtual memory space in the heap, which makes it very unlikely that the process will do anything but get aborted by the operating sytsem. Tcl will simply panic when its malloc fails. This is quite different than the standard gets() buffer overlow attack where you can craftily put nasty code instructions on the stack and cause the program to is misbehave in predictable ways. >>>Colin McCormack said: > On Tue, 2004-07-20 at 14:51, Gerald W. Lester wrote: > > Colin McCormack wrote: > > > >However, on a peripherally related matter, GPS has pointed out on tcl > > >chat that it's possible to crash the underlying tcl by sending an > > >*extremely* long string - because [gets] has no bounds checking on the > > >length of a line, and tcl will eventually run out of allocatable storage > > >for buffering. > > > >Probably the best/only/complete solution to that is a TIP to fconfigure > > >a line limit. > > > Actually I'd to see things use read and TIP for an option -breakon > > ListOfChars > > Why would you prefer this, Gerald? I have no objection to it at all, > but I'm interested to know what it buys. > > I think the gets overflow problem is similar to the C gets() overflow, > but it has the desirable property of crashing tcl rather than allowing > the sender to execute arbitrary code :) Given that [gets] will continue > to exist, [gets] overflow and tcl crash will always be a problem, so I > see your suggestion as orthogonal to this specific problem, although it > may stand on its own merits. > -- > Colin McCormack <co...@ch...> > > > > ------------------------------------------------------- > This SF.Net email is sponsored by BEA Weblogic Workshop > FREE Java Enterprise J2EE developer tools! > Get your free copy of BEA WebLogic Workshop 8.1 today. > http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click > _______________________________________________ > TclHttpd-users mailing list > Tcl...@li... > https://lists.sourceforge.net/lists/listinfo/tclhttpd-users > -- Brent Welch Software Architect, Panasas Inc Delivering the premier storage system for scalable Linux clusters www.panasas.com we...@pa... |
From: Brent W. <we...@pa...> - 2004-07-20 21:34:33
|
It should be possible to do a non-blocking read instead of gets. You would have to change the code to accumulate the initial line, and then bail out if it grew too long. >>>"Gerald W. Lester" said: > Colin McCormack wrote: > > >On Tue, 2004-07-20 at 11:34, Brent Welch wrote: > > > > > >>I'd be OK with a simple string length limit of say, 10,000 characters. > >>Put the value into the Httpd array in lib/httpd.tcl along with the > >>other hardwired constants in that module. > >> > >> > > > >Yes, this might well be worth doing. > > > >However, on a peripherally related matter, GPS has pointed out on tcl > >chat that it's possible to crash the underlying tcl by sending an > >*extremely* long string - because [gets] has no bounds checking on the > >length of a line, and tcl will eventually run out of allocatable storage > >for buffering. > > > >I hasten to add that tclhttpd shares this behaviour with anything > >net-connected which uses gets (ie: just about every web service in > >tcllib.) > > > >Probably the best/only/complete solution to that is a TIP to fconfigure > >a line limit. > > > > > Actually I'd to see things use read and TIP for an option -breakon > ListOfChars > > -- > +--------------------------------+--------------------------------------- + > | Gerald W. Lester | "The man who fights for his ideals is | > | Ger...@co... | the man who is alive." -- Cervantes | > +--------------------------------+--------------------------------------- + > > > > ------------------------------------------------------- > This SF.Net email is sponsored by BEA Weblogic Workshop > FREE Java Enterprise J2EE developer tools! > Get your free copy of BEA WebLogic Workshop 8.1 today. > http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click > _______________________________________________ > TclHttpd-users mailing list > Tcl...@li... > https://lists.sourceforge.net/lists/listinfo/tclhttpd-users > -- Brent Welch Software Architect, Panasas Inc Delivering the premier storage system for scalable Linux clusters www.panasas.com we...@pa... |
From: Brent W. <we...@pa...> - 2004-07-20 21:24:27
|
Just a simple one-html-page doc that explains what the sample app is good for, and how someone can get started using it. I'd like to add a sampleapp section to the sample doc tree for these "one pagers" >>>Colin McCormack said: > On Tue, 2004-07-20 at 11:35, Brent Welch wrote: > > One thing I didn't get to in the last release was a good write-up > > on the various sample apps. Are you inspired to start that? > > Ok, sure. By write-up, do you want user doc, tech doc, marketing > material, or all three? I really suck at documentation ... oh, and > testing, but I'm trying to get better. > > At the moment I'm playing with virtual file systems. If it stands still > long enough, I'll make a VFS out of it. Some of SEH's work on wikit > http://wiki.tcl.tk/11371 is particularly inspiring. > > -- > Colin McCormack <co...@ch...> > -- Brent Welch Software Architect, Panasas Inc Delivering the premier storage system for scalable Linux clusters www.panasas.com we...@pa... |