r3wp [groups: 83 posts: 189283]
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r3wp

[!Cheyenne] Discussions about the Cheyenne Web Server

Graham
1-Jul-2010
[8328]
Just wondering if do-sql protects against SQL injection ...
Janko
1-Jul-2010
[8329x6]
It supports Prepared Statements (Parameterized Queries) which I think 
are bullet proff of I think (at least) because they are done with 
database. Theory is that if you do it in code there can be edge cases 
where db will interpret stuff differently as you quote / escape it 
so that is not good.
do-sql 'db [ "select * where id = ?" id ]
what do you mean by separate web-apps?
http://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet#Defense_Option_1:_Prepared_Statements_.28Parameterized_Queries.29
I use isolated approach too, but I use sqlite databases which are 
not that good for webapps but ok for isolated since 1 user wont make 
hundrets of connections to the same database at the same time
and sqlite databases are just files so you can have them as many 
as you can stuff on your disc :)
Graham
1-Jul-2010
[8335]
Ok, good to know ..never seen it discussed before.
Terry
2-Jul-2010
[8336]
Looking like the next mobile Safari will support websockets... pushing 
Cheyenne generated data to the iphone sound intriguing.
Kaj
3-Jul-2010
[8337]
It should: WebSockets have been in the WebKit development builds 
for a while. So all the other WebKit-based browsers should get it 
soon, too
Terry
9-Jul-2010
[8338x3]
I have an ongoing issue with cheyenne websockets when not using port 
80 (?) the page loads, the socket connects, but immediately disconnects?
the browser disconnects (dropped an alert in the ws.onclose function) 
but there's no disconnect message from Cheyenne?
Actually, not quite.  It's not working when connecting from the machine 
that's running Cheyenne (windows 7), but connects fine from an xp 
box on the same network.
Graham
9-Jul-2010
[8341]
You're running cheyenne on port 80 under windows 7?
Dockimbel
9-Jul-2010
[8342]
Hi Terry, it's possible that the ws URL wth port <> 80 returned by 
Cheyenne doesn't match the one expected by the browser to validate 
the ws handshake, let me have a look at it...
Terry
9-Jul-2010
[8343]
port 82
Dockimbel
9-Jul-2010
[8344]
Terry, it doesn't look like port-related.
Terry
9-Jul-2010
[8345]
I think its some weird Windows 7 thing.
Dockimbel
9-Jul-2010
[8346]
What URL do you use for your ws connection in JS code?
Terry
9-Jul-2010
[8347]
I've tried everything.. now im using the  FQDN including port :82
Dockimbel
9-Jul-2010
[8348x2]
Can you show me the URL?
Do you change the hostname dynamically in the ws URL or is it static?
Terry
9-Jul-2010
[8350x2]
static
it's in your user group
Dockimbel
9-Jul-2010
[8352x2]
if it's static, then it can work only for the URL you've written, 
so from the server itself, the URL might be invalid
I mean, if you've used something like ws://intranet/app.rsp and ws://intranet 
is not resolved on your server, that's would be the cause of your 
issue
Terry
9-Jul-2010
[8354]
from the server, i cant' get a message to on-message .. but from 
the other client, I can.. only it won't reply.
Dockimbel
9-Jul-2010
[8355x2]
Terry: just replace ws:// by http:// and test the URL from rebol 
console with a READ (from your server box)
(or from a ws-enabled browser from your server box)
Terry
9-Jul-2010
[8357]
hmm.. how about this.. when i close Cheyenne, the messages are sent 
back to the browser..AFTER it closes
Dockimbel
9-Jul-2010
[8358]
if it works on port 80 and not 82, the issue is probably not Cheyenne-related
Terry
9-Jul-2010
[8359x2]
The port 80 vs 82 was a guess.
One of the problems is debugging this stuff in Chrome... not sure 
how to watch the traffic.. need some network sniffing tools i suppose.
Graham
9-Jul-2010
[8361]
doc, is curecode still under active development ?  Is there a release 
1 on the horizon?
Terry
9-Jul-2010
[8362]
The exact same code is working fine on another server.. move to here 
and *poof*
Graham
9-Jul-2010
[8363]
Is windows 7 your target platform?
Terry
9-Jul-2010
[8364x3]
I use 'em all baby.. I .. use .. them... all.
well, except for Mac
Apple had their chance back in the early 80's.. back then you had 
a choice, forfeit the downpayment on a house and buy a Mac, or get 
a clone.
Dockimbel
9-Jul-2010
[8367]
Graham, curecode development is currently on hold, as all my REBOL 
related projects (except Cheyenne for bugfixing and minor improvements)
Graham
9-Jul-2010
[8368x3]
That's what I feared ...
So, is there going to be a groovy version??
Or is it Scala ?
Dockimbel
9-Jul-2010
[8371x2]
hehe, probably not groovy, I didn't yet choose my next programming 
language...JS is currently my favorite for frontends thought.
Scala: too many java dependencies, so not for me.
Graham
9-Jul-2010
[8373]
I tried to install Jira .. but it no longer supports Firebird so 
I was looking for something else
Dockimbel
9-Jul-2010
[8374]
I'm still wondering if I should build my own language (probably REBOL-derivated) 
or dive in a mainstream one...
Graham
9-Jul-2010
[8375x2]
Well, Jira works fine under Windows .. but Linux requires more knowledge
Well, there's Karl's clone ...
Dockimbel
9-Jul-2010
[8377]
I've heard good things from Jira's users