in reply to CGI/FTP security question

Using DBI with DBD::CSV may solve your problem. You'd still be writing to a flat-file, but doing with SQL.

Also, I wonder if you might be better off using TFTP (perhaps over a TCP connection and using some of the extentions for authentication). If all you want to do is upload and download files (not even get directory listings), TFTP might be easier to implement than even a simplified FTP server.

----
I wanted to explore how Perl's closures can be manipulated, and ended up creating an object system by accident.
-- Schemer

: () { :|:& };:

Note: All code is untested, unless otherwise stated

Replies are listed 'Best First'.
Re: Re: CGI/FTP security question
by dakedesu (Scribe) on Dec 10, 2003 at 21:46 UTC

    Thanks, I check those modules out...

    But I thought TFTP was meant to be done over UDP? Some files might be too big to be sent back and forth reliably with UDP. Or am I thinking of another FTP variant? Or is it acceptable to do TFTP over TCP, like you suggested?

[reply]

      Yes, TFTP is normally done over UDP, but there's nothing that says it must be. In fact, IIRC, the RFC explicitly states that other transport layers are OK. Be sure to check out some the extentions to it that can improve efficiency.

      ----
      I wanted to explore how Perl's closures can be manipulated, and ended up creating an object system by accident.
      -- Schemer

      : () { :|:& };:

      Note: All code is untested, unless otherwise stated

[reply]
[d/l]
        Yes, TFTP is normally done over UDP, but there's nothing that says it must be. In fact, IIRC, the RFC explicitly states that other transport layers are OK. Be sure to check out some the extentions to it that can improve efficiency.

        A quick google found RFCs 783, and 1350---does it having only two RFCs associated with it sound right to you?

        Also, does it support sessions? (I'd think not), because I would guess that multiple files will need to be sent with some requests--files that I would prefer not to waste time authenticating over again

        Actually, I could probably make it a session based tftp... but...

        I guess, I am more confuse now than before--I have much to grok.

[reply]

In Section Seekers of Perl Wisdom