r3wp [groups: 83 posts: 189283]
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r3wp

[CGI] web server issues

Volker
5-Dec-2005
[426x2]
can you have subdirs with cgi-scripts? so that you can call http://cgi-bin/project1/script.cgi
?
then maybe you can restrict access to that folder by .htaccess.
Pekr
5-Dec-2005
[428]
well, as for my server, I can install rebol regullarly. We just were 
thinking loud here with Graham, if that is good aproach or not to 
have it in cgi-bin, so simply you could run your rebol scripts without 
ISP to even know you are using rebol :-)
Volker
5-Dec-2005
[429x4]
Grahams obfuscation-trick should work too, as long as nobody on the 
same server tries to break in.
I would ask isp to allow exes in another folder. dont know how he 
would react thought.
btw, ct mentioned virtual server for e4.99. Dont know about quality, 
and i see german, do you see english? http://www.netfabrik.de/
cgi - maybe an extra exe which only runs as cgi?
Sunanda
5-Dec-2005
[433]
REBOL does not have to be in the cgi-bin folder.

If it is elsewhere, have a shebang in the first line of each script 
to point to where the exexcutable is.
(apologies if I'm missing the point of the discussion here)
Volker
5-Dec-2005
[434]
Seems some hosts disable exes outside of cgi-bin
Sunanda
5-Dec-2005
[435]
That would be a problem :-)
Graham
5-Dec-2005
[436]
my host does that .. I'm only allowed exes in the cgi-local directory
Volker
5-Dec-2005
[437]
Did you test subdir?
Graham
5-Dec-2005
[438]
and since my cgi-local is a mapped directory, I can't create subdirectories
Volker
5-Dec-2005
[439x3]
Sad. and no linux-sdk?
ah! you should be able to trap things in %user.r .
if you can write there.
Graham
12-Dec-2005
[442x5]
This is an odd one.  I have a form that records a user's email address, 
the time they filled in the form, and their ip address.

A user did so, and got two subscription notices - timed 30 seconds 
or so apart.  So, both were his email address, but the ip address 
of the later one was from Google!
My deduction is that somehow google is tracking his movements, and 
submitted the form themselves to get the content ...
I guess I should download the web logs to see what actually happened.
Yep, that was it.  Mediapartners-Google/2.1 submitted the form again. 
 It looks like if you have the Google search bar, it submits all 
your internet traffic to google, who then go and try and index that 
site - including submitting your email address to a form!!
An older link .. beware of the Google search bard : http://www.sidhe.org/~dan/blog/archives/000267.html
Sunanda
12-Dec-2005
[447]
That's exactly what Google does.

It has some sites indexed purely because the developer visited the 
site while using a browser that had the Google toolbar active. Otherwise, 
the site would have remained invisible.


Of course that doesn't excuse the developer from putting up a private 
or incomplete site without password or other protection. There are 
otherways for private URLs to slip into public consciousness. The 
Google toolbar is simply the most widespread.
Gabriele
12-Dec-2005
[448]
Graham: was that a GET or a POST form? It makes sense for them to 
record urls with parameters, but it would be disturbing if they where 
recording POST contents.
Anton
12-Dec-2005
[449]
Graham, that's very interesting. Good to get an update on how clever 
searchbots are getting.
DideC
12-Dec-2005
[450x2]
Good to know !!

Looking at some log on a server I have to administrate, Im affraid 
to see many request trying to find  some /ebay, /lassalebank, /admin, 
/phpmyadmin pages on the site.
Internet looks more and more like a jungle.
Then, no I think of putting "robots.txt" file, I just think that 
some hackers can use it to exactly do the opposite of what it's suppose 
to do. They probably have make som bots that  just pick all pages 
marks as 'dissalow in it. If you don't know the name of the pages, 
it's a good place to find some !!
Graham
12-Dec-2005
[452]
Gabriele, it was supposed to be a POST form, but looking now at the 
source, I see I typed "type=post" instead of "method=post", so it 
turned out to be GET.
Volker
6-Jan-2006
[453]
(actually html-question)
how do i set the color for <pre>-tags with css?
Sunanda
6-Jan-2006
[454]
pre {color: blue}
Volker
6-Jan-2006
[455]
thanks
Sunanda
6-Jan-2006
[456]
Of, if you meant the background rather than font color:
pre {background-color: yellow}
Volker
6-Jan-2006
[457]
No, hmm, maybe both :)
Oldes
1-Mar-2006
[458]
what if I have Rebol cgi script in folder /cgi-bin/ and want to write 
to folder /public/ which is out of the sendbox. How to do it?
Volker
1-Mar-2006
[459x2]
#!/rebol -s
#!/rebol -sc 

of course. the -s swiches sandbox of. i then usually do a secure 
to my own folder first in the cgi.
Thør
4-Apr-2006
[461]
.
Louis
8-May-2006
[462]
I am running XP on my local computer. Out web host's server is running 
Red Hat Linux.


Which version of core should I use on the host server to run the 
cgi scripts?


If I download the proper Linux core interpreter to my  XP computer, 
and uncompress it using WinZip, will it be corrupted by XP?  How 
do I get a clean version of core to the Linux server?
Graham
8-May-2006
[463]
ftp
Louis
8-May-2006
[464x3]
Hi Graham, I am, of course, using ftp. I'm sending core 042 for Red 
Hat to the server using binary mode.
The script using text mode.
Both files are set to 755.
Sunanda
8-May-2006
[467]
<<Which version of core should I use>>

Use the most recent Core version that is supported on Red Hat and 
XP.

That way. you'll hit the least code incompatibilites when testing 
locally
Louis
8-May-2006
[468x2]
But testing using http returns an error saying that rebol is not 
in the cgi-bin directory where it in fact is.
500 Server Error

A misconfiguration on the server caused a hiccup. Check the server 
logs, fix the problem, then try again. URL: http://www.dayspringpublisher.com/cgi-bin/now.cgi

/home/daysprin/public_html/cgi-bin/now.cgi: Invalid shebang /dayspringpublisher.com/cgi-bin/rebol: 
Does not exist!
Sunanda
8-May-2006
[470]
Sounds like either:
-- your script does not start wityh a shebang
-- it does, but the rebol.exe it points to is not there
-- you don;t have teh right line endings
Louis
8-May-2006
[471x2]
#!/dayspringpublisher.com/cgi-bin/rebol -cs
REBOL [Title: "Hi"]
print "content-type: text/html^/"
print [<HTML><BODY>]
print ["Hi"]
print [</BODY></HTML>]
Does that shebang look right?
Graham
8-May-2006
[473]
no, it is not correct
Sunanda
8-May-2006
[474x2]
?? should be be rebol.exe at the end?
?? try an absolute path
as you don't know for sure where the webserver is starting from