May 2011 - dancer-users - lists.preshweb.co.uk

getting existing CGI.pm scripts to work under Dancer
by Leandro Hermida 24 Jun '11

24 Jun '11

Hi everyone, I'm new to Dancer and to this list, happy very happy to now have a chance to learn and use Dancer at work. I have an existing app which is CGI.pm script-based and was wondering what is the best way as a first step to get these scripts to work under Dancer? regards, Leandro

2 2

Dancer 1.3050 is the last version to pass tests on Strawberry Perl 5.12.3 x64...
by Curtis Jewell 02 Jun '11

02 Jun '11

(sent from wrong address yesterday...) Any ideas why yet? What help could I give you guys in finding out why? Here's a sequence of reports from me (they may be too recent to see) - it may or may not help: 1.3050 (PASS): http://www.cpantesters.org/cpan/report/358480df-6fc1-1014-ae6c-e47c788a0512 1.3051 (FAIL): http://www.cpantesters.org/cpan/report/805e3e15-6dde-1014-aee8-487a788a0512 1.3059_02 (FAIL): http://www.cpantesters.org/cpan/report/0c5484f9-6fc0-1014-b4fb-3479788a0512 I eventually installed 1.3050 so I have something to test Dancer-using modules against. I run Perl (at least, the x64 version, so I can BUILD Strawberry there) on Windows 7 Service Pack 1 on that machine (I have 3), if that helps. Perl -V:uname = Win32 strawberryperl 5.12.3.0 #1 Sun May 15 09:43:50 2011 x64 in all cases, so they're testing against the final build of Strawberry 5.12.3.0. Think of this as an 'I want Dancer to work for those who want to use it on Windows' request. (myself, I'm using Catalyst for my web site that's in progress, but to each his own!) --Curtis Jewell -- Curtis Jewell csjewell(a)cpan.org http://csjewell.dreamwidth.org/ perl(a)csjewell.fastmail.us http://csjewell.comyr.org/perl/ "Your random numbers are not that random" -- perl-5.10.1.tar.gz/util.c Strawberry Perl for Windows betas: http://strawberryperl.com/beta/ -- Curtis Jewell csjewell(a)cpan.org http://csjewell.dreamwidth.org/ perl(a)csjewell.fastmail.us http://csjewell.comyr.org/perl/ "Your random numbers are not that random" -- perl-5.10.1.tar.gz/util.c Strawberry Perl for Windows betas: http://strawberryperl.com/beta/

3 2

Benefits of moving from CGI::App
by gvim 31 May '11

31 May '11

I'm thinking of moving an application which currently runs on nginx + Fastpass/CGI::Application::PSGI to Dancer. What benefits are there beyond spiffier route handling, which isn't a big priority at this stage? Someone on the Plack list suggested it's more modern but didn't elaborate. gvim

1 0

Problem with mod_fcgid + android 2.3.3
by igor.bujna＠post.cz 31 May '11

31 May '11

Hello, on our webpage http://www.maxi-tip.cz , which i use latest stable version of dancer and everything else. I found problem with Android 2.3.3 and newer with webkit/533.1. When i open this in android 2.2 its everything OK. I run this page with mod_fcgid-2.3.5. It loaded everything good when this run standalone via ./bin/app.pl . I see in acces_log, than Webkit on android 2.3.3 not downloaded everything. I can't find where is problem :( Thank you for yours answer

1 0

Fwd: Recent Build requirement breaks 5.8.x installs
by Lee Carmichael 31 May '11

31 May '11

Gmail removed dancer users from email list :( ---------- Forwarded message ---------- From: Lee Carmichael <leecarmichael123(a)gmail.com> Date: Tue, May 31, 2011 at 1:18 PM Subject: Re: [Dancer-users] Recent Build requirement breaks 5.8.x installs To: Alberto Simoes <ambs(a)perl-hackers.net> Hello, Pulling out the BUILD_REQUIRES entry with captures works just fine: Magic-box:Dancer-1.3051 root# diff orig.Makefile.PL Makefile.PL 39,40c39 < 'Test::More' => '0.94', < 'Tie::Hash::NamedCapture' => '0', --- > 'Test::More' => '0.94' Also, I noticed in the cpan shell, if I answer 'No' to prepending 'Tie::Hash::NamedCapture' the install works. Thanks, Lee On Tue, May 31, 2011 at 11:42 AM, Alberto Simoes <ambs(a)perl-hackers.net> wrote: > > Lee, > can I ask you to remove the line requiring that module from Makefile.PL and > testing the module? I think it is there by mistake, but I do not have a > 5.8.x perl to test here. > > Thank you > > On 31/05/2011 17:32, David Precious wrote: >> >> On Tuesday 31 May 2011 17:25:24 Lee Carmichael wrote: >>> >>> Hello, >>> >>> I was in the process of upgrading to Dancer 1.3051 on one machine that >>> runs Perl 5.8 and it failed due to build requirement of >>> 'Tie::Hash::NamedCapture'. This was added to Perl in 5.10. The main >>> headache for me is that it broke the 'cpan install Dancer' command. >>> But it didn't stop me from updating dancer by hand. >>> >>> I hate to be the one asking for support on an dated language version >>> but i guess i am :) Should I open a bug for this or is the forward >>> direction of Dance away from 5.8? >> >> We don't want to break compatibility with 5.8.x if we can possibly help >> it; we >> realise that there are plenty of users still stuck on 5.8.x, for whatever >> reason. >> >> I'll take a look in to that and see where the requirement comes from, and >> see >> if we can work round it. >> >> If we depend on it for certain features, such as being able to use >> captures() >> to get params by name, we should just throw a warning at runtime if we're >> on >> an older Perl, but let everything else still work. >> >> > > _______________________________________________ > Dancer-users mailing list > Dancer-users(a)perldancer.org > http://www.backup-manager.org/cgi-bin/listinfo/dancer-users >

1 0

Recent Build requirement breaks 5.8.x installs
by Lee Carmichael 31 May '11

31 May '11

Hello, I was in the process of upgrading to Dancer 1.3051 on one machine that runs Perl 5.8 and it failed due to build requirement of 'Tie::Hash::NamedCapture'. This was added to Perl in 5.10. The main headache for me is that it broke the 'cpan install Dancer' command. But it didn't stop me from updating dancer by hand. I hate to be the one asking for support on an dated language version but i guess i am :) Should I open a bug for this or is the forward direction of Dance away from 5.8? Thanks, Lee

5 4

ssl questions
by Brian E. Lozier 31 May '11

31 May '11

I have set up my dancer app using plackup and behind nginx. I have set up nginx to accept traffic on either port 80 or 443 (https, encrypted). I want to ensure that the /login/ route is never accessed over port 80, only over https. To do this, I think I need to have a check at the top of the route to see if SSL is on and forward to 443 if not. Then after login is completed I want to forward them back to the unencrypted area. I've done this before under mod_perl (non-Dancer app), but I'm not quite sure how this should work in my current situation. Under mod_perl I believe I had an environment variable I could check to see if the connection was "SECURE" but now the connection is *never* secure between nginx and my dancer app right? My understanding is that the connection between the user and the nginx is secure, but nginx decrypts everything before forwarding to my dancer app right? Is this a security risk? I dumped Dancer::Request and didn't see anything that will allow me to find out if I'm under https. Thanks, Brian

3 4

Fwd: GSoC Status Report for Week #1
by franck 31 May '11

31 May '11

Hi everybody I'm not sure everybody know that this year we have a GSoC student: Carlos. Here is his status report, I'll ask him to CC the list his next status. I'm sure this could be interesting to some of you :) ---------- Forwarded message ---------- From: gnusosa <gnusosa.mx(a)gmail.com> Date: Tue, May 31, 2011 at 10:23 AM Subject: GSoC Status Report for Week #1 To: tpf-gsoc-students <tpf-gsoc-students(a)googlegroups.com> Sorry for the late report, but I was socializing with my family and friend in this Memorial Weekend. Basically, a holiday in the US. Nevertheless, it is not an excuse for my late report. Anyhow, same format continues you can find my report in my blog in the following address: http://log.gnusosa.net/code/gsoc/status-report-1 ######################### Status Report for Week #1 Since I started working in the middle of the Community Bonding Period, there was not much to do to the module in the week #1. However, some progress was made with the module. For now, the module Script.pm is fully capable of writing a dancer app from the call of the script bin/ dancer. These was the expected work for the week #1. What I worked on the week #1? Well basically, moving the functions to object-oriented methods. We all know that by default in almost every module, you add Module- >new(%args)->run; and the methods. From that I also moved the functions from get_* to set_*, for example, get_lib_path to set_lib_path in the new object constructor. You can find more detail in the most recent commit I made in my github account.(https:// github.com/gnusosa/Dancer/commit/ e946254caa5b33cdcb75a60b34ec39ee5e3c56e8) What I learned in the week #1? I learned to appreciate steps and instructions, for the second time I screwed up my repo, and all because I thought moving and stripping functions would reduce work. When in reality, I was just adding more work and steps. Reinvention of the wheel destroys, and it takes the most precious hours of your day. On another side, git is the tool of the year for me. I love to sync and clone repositories in my two netbooks, any change can be updated in any local repo in matter of seconds. torvalds++ Related to Perl code, I learned that idiomatic pragmas and other idiosyncrasies are great for refactoring, but not for rough drafting. I guess Perl sticks to the Unix philosophy point, which tell us that simple is better. However, I think that a more idiomatic code is more maintainable, but I don't want to start a debate, I just want to keep learning. I guess, time and work will tell. As of working habits, I made better use of perldoc and man for any Perl related documentation. I bought Modern Perl and Effective Perl Programming, and both books are next to my keyboard on a daily basis. The chapter "Objects" in Modern Perl helped me to grasp what was essentially needed to migrate the functions to object methods, and adding the new class object. Most doubts on the topic, were later answered by franck in the middle of my commits revisions. What's next? For week #2, the tasks are as follows: Migrate the script to an Object Oriented module. Write tests for the OO Module. If needed, refactor and modify the module. >From what you can read, the first point is already completed. But these works great for me, since it gives more time to study and learn from the testing settings that Dancer modules work with. I've barely played with tests before, and I think this is a great time to start working on a topic I lack knowledge of. Because the module rough draft was written in a quick matter, sawyer decided to modify the project schedule, and add other tasks according to the time and the work done. You can find the new project schedule in my GSoC section. (http://log.gnusosa.net/code/gsoc/project-schedule) -- You received this message because you are subscribed to the Google Groups "tpf-gsoc-students" group. To post to this group, send email to tpf-gsoc-students(a)googlegroups.com. To unsubscribe from this group, send email to tpf-gsoc-students+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/tpf-gsoc-students?hl=en. -- franck cuny http://lumberjaph.net - http://github.com/franckcuny

1 0

Security Issue Fixed in Dancer 1.3051 (CVE-2011-1589)
by Alexis Sukrieh 30 May '11

30 May '11

Hello, A vulnerability has been discovered in Mojolicious and Dancer recently, it has been fixed in both projects. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1589 Dancer provides a security patch for this issue in the last stable release: 1.3051 https://github.com/sukria/Dancer/blob/devel/CHANGES#L55 You are strongly adviced to upgrade any public website that is powered by a previous version of Dancer. For those of you who use the Debian package of Dancer, a security fix has been released as well: http://packages.qa.debian.org/libd/libdancer-perl/news/20110528T145222Z.html Regards, -- Alexis Sukrieh -+- Hackers gonna hack! “The problem with quotes on the Internet is that you can't always be sure of their authenticity.” -- Abraham Lincoln http://sukria.net http://twitter.com/sukria

1 0

How do I get the unique session id for a session?
by Gurunandan Bhat 29 May '11

29 May '11

Hi, I am planning to use the session id for session as a key for a hash that I am maintaining. How do I get the session id from the session object? Thanks

3 5