AltME groups: search

sunanda I am getting an error from the server itself!  


whenever I press download, it starts the download (shows the green 
xfer data on the bottom, and then pops up an error:  here is the 
error as reported by LDS:

make object! [
    status: [100 20 "bad cgi data"]
    data: none
    diagnostics: [9003 9003 9.8084E-2]
    supply-date: 15-Sep-2006/1:03:41
]


have any idea where that is comming from?  I try to check it out 
from the code I have... but its been sooo long, A nudge on your part 
will help me get this working much faster IMHO!

There is this script in the library http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=ez-plot.r
but there seems to be missing the q-plot.r script, which is required:(

Thanks. It's in the Library now:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=q-plot.r

I'd be delighed to have some better styles.....Why not experiement 
(all the Library's CSS can be overridden by any Library member) and 
come up with something you like. If you do the work, we can take 
it from there :-)
http://www.rebol.org/cgi-bin/cgiwrap/rebol/css-available.r

For those who never visit the Mailing List: Brian has stepped up 
to the mark and is a member of the Library Team.....He's going great 
work already:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/ml-display-message.r?m=rmlVPCC

Thanks.

Basically, we use this code of Carl's when displaying a script in 
color:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=color-code.r

Thogh we've adapted it for CSS and  a couple of other minor tweaks.
What we are lacking is beautiful CSS :-)

Thanks......And if anyone wants to play with the CSS tha colors scripts 
on REBOL.org, the code is here:
http://www.rebol.org/cgi-bin/cgiwrap/rebol/css-view-system.r

(look for the SC-xxxx styles). You can copy them into your personal 
settings and change them.

I have a function that I'd like to add to the Library that takes 
some user data (could be from CGI query, or from View fields), processes 
and validates it according to a given spec, eg. [word "2007/4/30"] 
-> [word: date!] -> [word 30-Apr-2007]  I've named this function 
'import, but I realise that %import.r may be too generic a script 
name for the Library.  Any suggestions?

How does this look? -- http://www.rebol.org/cgi-bin/cgiwrap/rebol/documentation.r?script=filtered-import.r

You can upload *packages* -- assemblies of any type of file you like.
Some examples here:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/search.r?filter=type-package

That's a nice idea for a sort of "REBOL explainer" application.
But it would be difficult to do in the Library.

The Library does attempt to load and parse scripts -- that's how 
we do the colorisation. But (as with Gabriele's code) we rely on 
REBOL's own reflective abilities to tell us what is a word, function, 
operator etc.

The Library runs an old version of Core (and even if we update that, 
we'd never run a version of View on a webserver) so it does not have 
access to all the information a proper explainer.highlighter would 
need.
Take this script for example:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?color=yes&script=reboldiff.r

'new-line is a valid REBOL word, but it is not colored: that's because 
it is not a word in the version we use.

So sadly, the colorisation at REBOL.or remains a nice bit of eye 
candy rather than a solidly dependable feature.

The personalised CSS feature starts here:
http://www.rebol.org/cgi-bin/cgiwrap/rebol/css-available.r

Use the menu bar to explore the options [Preview page · Update · 
View system CSS · Switch to system CSS · CSS help]
Have fun!

So did !
The color styles used right now are here:
http://www.rebol.org/cgi-bin/cgiwrap/rebol/css-view-system.r
(search for colorizer)

We already (in effect) collapse some into the same color: like file! 
and email!  Perhaps url! should be the same color too.

I see geomol has updated his personal CSS at the Library.....You 
can now look at any script using his set of colours and font effects...Much 
better than the system default!!
Example:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?color=yes&script=acgiss.r&css=geomol

(just add css=geomol to *any* Library URL. Or set your CSS preference).

And anyone can play the game -- devise and publish your own CSS for 
script coloring or any other aspect of the Library:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/boiler.r?display=css-help.html

If you are a member of this Altme world, then you may also have been 
a member of its predeccessors: REBOL World and REBOL2 world.

There is now a private archive of those worlds on REBOL.org:
http://www.rebol.org/cgi-bin/cgiwrap/rebol/aga-index.r


However, you will only see them if your REBOL.org membership profile 
says you were a member -- they were *private* worlds, so we cannot 
make the posts publicly available.

If you were a member of either world and want access to the archive, 
please just ask -- just let me know your World user name and your 
REBOL.org member name.

the script is correct for download http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=code-colorizer.r
but not for display.

I thought it might be version related, but one of the VID versions 
I have exhibit the problem:
** Script Error: Cannot use multiply on none! value
** Where: edit-text
** Near: 2 * face/edge/size

http://www.rebol.org/cgi-bin/cgiwrap/rebol/discussion.r?script=calendar.r

Thanks Gregg....That seems to have done the trick:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/discussion.r?script=calendar.r

Yes, we also index comment lines separately. Basically, we use the 
same logic as Carl's color-code.r to analyze the parts of a script:

  http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=color-code.r

Results of a tiny bit of debugging on the ascii chars problem:
-- problem seems to be at the input stage:

     -- if you have exended ascii characters (top bit set, like the 1/4 
     used in the script) what we get from the webserver is bad (extra, 
     unexpected extended ascii chars)

    -- only download is (visibly) affected, although the extra extended 
    ascii chars are present in the text streams

     -- though there is some REBOL mezz code (decode-cgi) that may be 
     doing something I do not understand

    -- I can replicate the problem with both Apache and Xitami which 
    suggests the problem may be in REBOL rather than a given server.


-- the quick fix would be to add accept-charset="ISO-8859-1" to the 
<form ....> or <textarea ....>

    -- but that stops all extended ascii, including the ones we want. 
    So we won't do that.

-- the slower fix has yet to emerge from the available options.

Sadly, REBOL running as CGI under the two servers I've tested (Apache 
and Xitami) does not seem to support the whole range of ASCII -- 
ASCII chars with the 8th bit set seem to cause problems.

I don't know where the problem really is, but right now, we do not 
even support 8-bit ASCII, let alone anything more modern :-)

here is an error I got trying to go to the http-tools.r script...

Not Found


The requested URL /cgi-bin/cgiwrap/rebol/view-script.r was not found 
on this server.


Additionally, a 404 Not Found error was encountered while trying 
to use an ErrorDocument to handle the request.
Apache Server at www.rebol.org Port 80

Thanks, So did I -- I uploaded one changed cgi script as part of 
the sea trials for the new site. And suddenly it all went dark.
Back now.....Not sure what happened, yet.

Got it -- what I'd uploaded (using our time-tested uploader) somehow 
had the wrong sort of line endings, and Apache got very unhappy.

My immediate attempted repair (hand upload via FTP) also had the 
same issue.
I have no idea why the line endings are suddenly acceptable.


The ISP saved the day by restoring the cgi-bin from the previous 
night's backup.

It's a known issue: http://www.rebol.net/cgi-bin/rambo.r?id=3477&

Have you read the CGI how tos?

after those, the RBBS project does some dynamic pages generated from 
databases and key values http://www.rebol.com/docs/cgi-bbs.html
  HOWEVER, when delving into anything CGI (not wiki link, so maybe 
not what you want) it takes some heavy head-scratching

http://www.rebol.org/cgi-bin/cgiwrap/rebol/one-click-submission-help.r

Running View as a CGI can be a problem.
I don;t know any solutions to that.

I asked for mu web service provider to add linux-gate.so.1 to the 
server he did not aprove that he did (actualy I did not get any answer 
yet), but today I found that my test script:

 #!/var/www/cgi-bin/rebview -cs

REBOL [Title: "CGI Basics"]

print ["Content-type: text/html" newline]

print "Heloooooo!!!"

works differently - I am getting following response:

** Near: size-text self

You can check: http://www.jk.serveris.lv/cgi-bin/test

What could it mean?

and if you do have X installed the cgi script is likely not run  
from a graphicly aware shell so there may be virtual frame buffers 
involved

Well - I found it: http://support.microsoft.com/?id=315122

And Rebol script works well when in Web Service Extensions you set 
as Allowed All Unknown CGI extensions.

But then you will get warning message, that it could be potential 
security threat - then the next question is from dummie:
Is it safe to install rebol in such way?

Personaly I do not like M$ as it is monster. ;-)

But in my last and current work I am not responsible on which web 
server to chose and therefore neither for security of web server.

And I am trying to separate my  resposibility and SP responsibility, 
but of course there is cases when they overlaps.

I am just trying to find  as much as possible info about security 
of web servers and it does no matter if it is M$ or not .

My first installations was on IIS 5.0 in intranet - so I relied on 
firewall. The last case is in public internet. 

So I think if there are no possibility to upload danger cgi scripts 
or pass danger code to existing scripts, than from my side I did 
all.

size-text: xwindows is client/server. the x-server , that is your 
local computer, which offers to aplications to display things to 
you. And it has some important informations locally, especially the 
fonts (and can cache images and such).

/view needs access to the fonts and so access to a running x-server. 
the x-libs are only an interface to connect to the server. (The xserver-libs 
could be used directly, but well, /view does not do that. Seems to 
be tricky.)
A incomplete sketch how to do it, with no attention to security:

So with /view you need a running x-server, one way to do that  headless 
is vnc.  Can also run on another machine. 

Then you need to tell  rebol where it is, there is an env-var $DISPLAY. 
Which must be set before rebol runs. Did not figure out how to configure 
that. Running a bash-script as cgi, set  $DISPLAY, call the real 
rebol-script should work. And there may be issues with authentification, 
x-windows does not like everyone to connect by default, or the other 
way around, its too easy to make it too open ("xhost + ip"). There 
are more secure ways, but looked more complicated and i never tried. 
All in all i would run such things on windows.

I mean, does it simply send it to a cgi program or does it save the 
files sent as well?

it just sends data to cgi (one by one = not all at once)

so on the cgi side you get just one file as from one input file field

I'm using FormMail.pl to handle some simple contact details collection, 
but seems it is not highly regarded in the Perl community due to 
it's vulnerability to SPAM and bots. nms seems to offer a more secure 
version, http://nms-cgi.sourceforge.net/faq_nms.html, but I haven't 
done anything with Perl for years now. Anyone have a suggestion for 
a good FormMail.pl replacement, are are rumors of it's death greatly 
exaggerated?

How the MS IIS is putting  those cgi data into system/ports/input?

I had problem with MS IIS - hangs on read-io - results to cgi timeout!

system/options/cgi/remote-addr is not registered, apparently, so 
I can't edit pages.

James: try this:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=acgiss.r

http://www.rebol.org/cgi-bin/cgiwrap/rebol/documentation.r?script=acgiss.r

My ISP just changed OS for FreeBSD 6.2 - and all my rebol cgi scripts 
are not working! What should I ask them to?

it is possible that it can interfere with other apps, so they might 
refuse to do it. however, linux allows "local" libs (not system wide, 
but just for your cgi or even just for rebol), so if it's the same 
on freebsd they could do that.

Also, I don't know if this is so with every setup, but when you create 
a file with a CGI script, the process owner, not the script owner, 
is the owner of the file, so you'd need to be able to do owner-read/owner-write. 
 I usually set owner/group/world-read/write to true and execute to 
false.

Hi,  question for the webheads.


   In short.  Can a form call a cgi action that processes data but doesn't 
   output any Content-type

(or anything for that matter) without the browser status coming up 
with "waiting for reply".


   I've got a client that wants a form for requesting more info, but 
   they want to leave the user on

the same screen, so I thought I could have a %process.cgi that takes 
the data and plays with it

and then have an intrinsic  onsubmit=alert(...)  to inform the user 
that the request has been submitted.

The %process.cgi doesn't 
print "Content-type ..."


it doesn't print anything, as I was hoping to leave the same browser 
screen up.

Am I living in lalaland?


Should the %process.cgi just redirect back to the original page with?


print "location: /original.html^/content-type: text/html^/"  or is 
that deprecated now?  It works under my test heads, Cheyenne and 
nonIE browser, but is there a bigger better way?  Or do I tell the 
client that the browser needs a new page and I can add a back link 
(not preferred).

Thanks for listening

Daniel;  Try http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=cgi.r
 for some code.

And http://www.rebol.net/cookbook/recipes/0026.htmlfor a REBOL sample 
solution  and then wait for the rest of the forum members to pipe 
up with 'bigger better' solutions, and they will.  :)

Try this ML thread http://www.rebol.org/cgi-bin/cgiwrap/rebol/ml-display-message.r?m=rmlKVSQ
and some notes by Sunanda on CGI 'safety' 

http://www.rebol.org/cgi-bin/cgiwrap/rebol/art-display-article.r?article=x60

My bad. http://www.rebol.org/cgi-bin/cgiwrap/rebol/art-display-article.r?article=x60w
 but unfortunately this article skips over the info for multipart/form.

Try http://www.rebol.org/cgi-bin/cgiwrap/rebol/ml-display-thread.r?m=rmlRDSC


But to be honest, I've been waiting for Graham or Dockimbel to notice 
the conversation.   My exposure to this sequence is purely "little 
think cut'n'paste" from the cookbook, since I'm REBOL in, REBOL out 
for the website I run.  :)

I played with Oldes script a bit, didn't get far. I think there's 
no other option than follow Graham's advice and delve in the http 
scheme. I had hoped to find something in the script archive, oh well... 
I saw that even in the Ruby and Python community there's some confusion 
on how to achieve multipart form submissions with CGI. (Python default 
http library also uses  "application/x-www-form-urlencoded" and not 
""multipart/form-data", but there's a library called HTTPFileUploader 
that does the job). Last time I tried to hack the http scheme I wasn't 
so succesful. This time, if I need help, I'll ask for help.

Anyone know the answer to this one? 

I have a cgi script that sends an email out. The problem is that 
I want to send to an address that has the same domain name as the 
website but whose mail server is not located there (It's an Exchange 
Server). Any other address works fine as expected. I think it has 
to do with the mx records but, the weird thing is that if I generate 
an email via php, it goes through. Therefore I'm thinking Rebol can 
do it too. 

I've used set-net  for the smtp server and have set it a different 
server completely but still no go.
And I'm in the process of having the MX records changed.

I mentioned the possibility (to overcome REBOL web-hosting) to place 
rebol executable directly in the /cgi-bin/ directory. Someone on 
ML mentioned I should not do that, security wise, as calling http://www.my-domain/cgi-bin/rebol
will spawn a process, which will run endlessly or so ...

Or what about building special rebol version using SDK, running by 
default in cgi mode, quitting imediatelly, if there is not get or 
post string?

petr, it is much better to just put rebol in another dir. there is 
no reason to have it in /cgi-bin/

but even then, putting it in another dir, in order to be able to 
run rebol, I have to set it as runnable too, no? So what is the difference 
in having it in cgi-bin or other directory, if permissions have to 
be equal?

the scripts have to be in cgi-bin, the interpreter can (and should) 
be somewhere else, where it is not accessible.

why? ftp access only gives access to cgi-bin? usually, you have your 
own home dir, with www and cgi-bin dirs inside.

So, in terms of my website, if I put rebol executable e.g. into /rebol/rebol.exe, 
is it any different security-wise to /cgi-bin/rebol.exe?

if it's in cgi-bin, maybe i could do something like http://yoursite/cgi-bin/rebol?-s--do delete... 
etc.

hmm, then ice thing is, that when I run http://www.my-domain.com/cgi-bin/rebol
--do "print 123", Apache returns error, stating I have no permission 
to do that. If I run cgi-bin/rebol, my browser does not seem to return, 
so I expect interpreter to run infinitely?

hmm, woult there be an option to prepare special version of interpreter, 
using SDK, not allowing to accept any parameters, run only in CGI 
mode?

maybe, but is it really worth it? i don't think anyone would put 
perl in cgi-bin for eg. so why rebol?

because ppl endlessly complain, there are no rebol web-hosts. So 
I thought I might have universal solutoin. Just find yourself web-host, 
which allows cgi scripts, and you are done ...

afaik, any host that allows any cgi-bin will also allow you to upload 
rebol somewhere not in cgi-bin and then use it.

Any ISP that gives you FTP access to your account and CGI does provide

www root - well, you can put in www but outside cgi-bin, so it can 
be downloaded but not executed. or, worst case, hopefully they allow 
you to put a .htaccess to deny access to rebol itself.

OK, I feel I miss knowledge on Unix permissions. So if cgi-bin dir 
as a whole has execute bit, everything in there can be executed? 
Hmm, and don't I need execute bit for rebol itself, even if put into 
other directory?

it's not execute bit of the dir, and it has not much to do with unix 
permissions, it's web server config. normally, web server will only 
execute things from cgi-bin and not somewhere else.

Is that the tune that  sounds like "God Save The King?"'   If there's 
a sugar maple blight, 'The Maple Leaf Forever' will sound lame ... 
and they'll never see the Eastern Townships annexed by Vermont.  
'CGI'  does stand for 'Chat Gateway Interfarce' doesn't it ?

Anybody noticed CGI is back as a programming model?

Now, what happens? The OS will start distributing the CGI processes 
over the multiple cores. Using the disk cache etc to speed loading 
times, enough memory per core on the processor. A 8Gb RAM quadcore 
should be able to run +- 1000 procs/sec (rough estimate). That's 
just one box, with that load it should be profitable. And as you 
obey rule 6, you can scale up and load balance pretty easily.

Winding down: Apache CGI with RSP is pretty good these days. If you 
combine:
- module management
- logging
- error handling
- session management
- database protocol (mysql://)
- CGI params handling

you can "just work".

Are you sure OS distributes CGI processes to different Cores? Is 
e.g. Apache working that way?

What are the best ways to protect source code from view in a cgi 
script?  When a script is made world-viewable, isn't that compromising 
the source pretty badly?

You want to set the file permissions for each script  globally executable, 
but not globally readable.

Also protect the cgi-bin folder from being read by the whole world...If 
you are using Apache, look at the IndexIgnore directive:

http://httpd.apache.org/docs/1.3/mod/mod_autoindex.html#indexignore

One of my clients updates his site via some tool, which always seem 
to add some space between the lines. After some time, the page is 
instead of 400 rows something like 13K rows - the size goes from 
cca 25KB to 100KB. So I wrote a cgi script, which reads index.html 
and removes blank lines. Everything is OK, when I run the script 
from the console. But when I run it via a browser as a CGI script 
call, it can't write the file. Dunno why - cgi-script is being run 
using -cs switch, I even put secure none in there, cgi-script has 
the same own, grp set as index.html, but I can't write it ....

Check the permissions of the file to be written. Are you also sure 
the cgi script is being executed? Check its permissions too..

I am sure, as I get cgi script output to the browser window. It just 
fails on the last line - write/lines %index.htm data

permissions look OK, but I will recheck. Dunno what user Apache runs 
cgi scripts under, so I better check it is others writeable ....

Maybe the cgi script current directory is not where the index.htm 
file is.
See if you can list the file, eg. instead of 
	write/lines %index.htm data
do this:
	print mold info? %index.htm

no, it is a different directory .... the script is being run in /cgi-bin/, 
while index.htm is at the root of the web ...

Changed index.html permission to 646, and it works now. Maybe CGI 
scripts are being run under the Apache user or group, who knows. 
Thanks for pointers!

is there a ways to know if a rebol script is being run as cgi or 
as a stand-alone?

I want to print out an html error when run from cgi, but execute 
code when run stand-alone.

system/options/cgi

ahhh yes, I can use the cgi headers to see if they are set... that 
was obvious... seems, I'm still not fully recuperated from the virus 
which I've been "nurturing" for a few days now.

I want to access a mysql db via a cgi interface directly with a rebol 
client.


I have a cgi script  that accesses the db and prints the results 
which I can read with the client but is this the best method? Is 
there a way to send the data directly to the client as rebol blocks 
or do I need to essestialy parse a cgi built web page as I am doing?

http://www.rebol.org/cgi-bin/cgiwrap/rebol/download-a-script.r?script-name=xml-parse.r

>> do http://www.rebol.org/cgi-bin/cgiwrap/rebol/download-a-script.r?script-name=xml-parse.r
>> parse-xml+ read http://www.ross-gill.com/
** Script Error: Invalid path value: parse-xml
** Where: parse-xml+
** Near: xml-parse/parser/parse-xml code

Chris -- I don't get that problem,

But you did make me look closer, and my earlier statement was wrong.
I'm using

http://www.rebol.org/cgi-bin/cgiwrap/rebol/download-a-script.r?script-name=xml-object.r
Which is similar to xml-parse, but not identical.
Example of usage:
probe: first reduce xml-to-object parse-xml
     {<?xml version="1.0" encoding="ISO-8859-1"?>
      <xxx>11</xxx>
     }

http://www.rebol.net/cgi-bin/blog.r?find=rebin<-- this?

Michael: form result should go to email automatically. you can send 
me a mail manually if you want. if there's a problem for enough people 
with the email form, i'll look into setting up a cgi.

You don't need cgi either, you can use 

set-net [ "form" 216.40.214.39 ]

in your script, and then 'send the results to you.

Olivier Auverlot proposes to add its Magic! script to the Powerpack. 
Magic! is a CGI handler that dramaticaly simplify the creation of 
dynamic web site "à la" PHP.

Version 3.5 is in the pipeline and will be release soon. But doc 
is in French AFAIK, so need to be translate before.

I'm looking for a bunch of "certified" software that can be used 
for setting up webservers, cgi, blogs, mail, pop etc.

maybe this thread can be useful: http://www.rebol.org/cgi-bin/cgiwrap/rebol/ml-display-thread.r?m=rmlKVVC

I think and I hope, that R3 design will be correct this time! No 
more integrated third party stuff, which does NOT belong to the kernel! 
The situation with fast-cgi was hilarious. It was never fixed under 
Windows, ot my knowledge ...

I've posted a message asking about the "lack of practical information 
for the devcon" on a french rebol forum : http://www.digicamsoft.com/cgi-bin/rebelBB.cgi?thread=%3C13Dec2006131213411293100%3E. 

I'll post/translate the answers here, if needed.

I did an engine to play NIM:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=nim-engine.r
It plays the game at the console prompt.

But I never got around to adding a View front end --- feel free any 
one.

Lots of games on the ML:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/ml-topic-index.r?i=games