From owner-freebsd-isp@FreeBSD.ORG Fri Jul 14 21:17:09 2006 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0714C16A4DA for ; Fri, 14 Jul 2006 21:17:09 +0000 (UTC) (envelope-from mark@gaiahost.coop) Received: from biodiesel.gaiahost.coop (biodiesel.gaiahost.coop [64.95.78.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6F8FD43D6D for ; Fri, 14 Jul 2006 21:16:44 +0000 (GMT) (envelope-from mark@gaiahost.coop) Received: from gaiahost.coop (host-64-65-195-19.spr.choiceone.net [::ffff:64.65.195.19]) (AUTH: LOGIN mark@hubcapconsulting.com) by biodiesel.gaiahost.coop with esmtp; Fri, 14 Jul 2006 17:16:42 -0400 id 007A4082.44B809BC.00005F28 Received: by gaiahost.coop (sSMTP sendmail emulation); Fri, 14 Jul 2006 17:16:41 -0400 Date: Fri, 14 Jul 2006 17:16:40 -0400 From: Mark Bucciarelli To: Danial Thom Message-ID: <20060714211640.GG396@rabbit> Mail-Followup-To: Danial Thom , David Rhodus , freebsd-isp@freebsd.org References: <20060714202233.GF396@rabbit> <20060714210032.69939.qmail@web33307.mail.mud.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline In-Reply-To: <20060714210032.69939.qmail@web33307.mail.mud.yahoo.com> User-Agent: Mutt/1.4.2.1i Cc: freebsd-isp@freebsd.org, David Rhodus Subject: Re: CGI apps in C? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jul 2006 21:17:09 -0000 On Fri, Jul 14, 2006 at 02:00:32PM -0700, Danial Thom wrote: > The first thing you need is a good cgiparse() routine that > handles all the GET POST variants, forms, multipart forms, etc. > Its a pain in the butt in 'C'. There's lots of these libs. uncgi is one I like pretty well--just sticks cgi vars into envirnoment. And actually, I found a few form2mail scripts. After posting, I did some proper googling. I'm more worried about things like DOS from a bogus content length header and spam via mail header injection and of course buffer overflows. So I'd still be interested if folks here have scripts they have audited and like. > php isn't half bad, and it has all the ugly stuff built in. You > might get your clothes a bit cleaner with the rock and stream > method, but use the washing machine. In the long run you'll be > glad you did. heh. I think a closer analogy is building a house from stone not sticks. m