in reply to PerlPlusPlugin: Security CGI problems

I have used it and it works. Did you modify the perlplus-secure.cgi to have an entry for your ppl script? You need to set the security level for each script explicitly there. 
$URL_ROOT="http://xxx.yyy.com/perl";
%url = ("$URL_ROOT/timesheet.ppl" => 4);
$sec_level= $url{$url};

[download]

Replies are listed 'Best First'.
Re: Re: PerlPlusPlugin: Security CGI problems
by basm101 (Acolyte) on Feb 21, 2003 at 16:43 UTC
    Yes I have it set like this: basically exactly as the example
    provided when I downloaded it except I changed URL root to be my CGI directory
    and I moved the test script ptk_test.ppl into my cgi-bin directory too. 
    
$URL_ROOT="path to my cgi directory/cgi-bin";
%url = ("$URL_ROOT/neko.ppl" => 4,
    "$URL_ROOT/plop.ppl" => 2,
    "$URL_ROOT/y2k.ppl" => 2,
    "$URL_ROOT/thunder.ppl" => 2,
    "$URL_ROOT/ptk_test.ppl" => 2,
    "$URL_ROOT/quest.ppl" => 2,
    "$URL_ROOT/tktetris.ppl" => 2,
       );

$sec_level= $url{$url} || 1;


print LOG "  security level=$sec_level\n";
close LOG;
                                                    
print "Content-type: application/x-perlplus:.ppl:Perl\n\n";
print "$sec_level";

    [download]
    basm101
[reply]
[d/l]
      I'm not sure it will work that way, with the ppl files in the CGI directory. Apache will try to run it as a CGI script and PerlPlusPlugin will never get a chance at it.

      I configured a separate perl directory with Apache. You could also use a home directory for the scripts. 

      Alias /perl/ /var/www/perl/

      [download]
[reply]
[d/l]
        ahh that makes sense...I have a perl_scripts folder within my public_html directory and I could put the tk script in there.
        Can I use a perl program as a URL ? I thought all URLs ended in .cgi or .html Perhaps I need to ask my system admin guy
        to setup a perl directory with Apache ?
        or can I just call up the perl scripts from wherever they are in my home user area ?
        eg. 
        $URL_ROOT="/basm101/public_html/perl_scripts";

        [download]
        What's this Alias thing mean ?
        thanks again for your help,
        basm101
[reply]
[d/l]

In Section Seekers of Perl Wisdom