r3wp [groups: 83 posts: 189283]
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r3wp

[Web] Everything web development related

Gabriele
7-Nov-2006
[1270x2]
allowing session handling to directly set variables is a bad design, 
see the plagues that php had for this.
just have those values inside session. that could be session/last-name 
for eg
Pekr
7-Nov-2006
[1272]
hmm, so construct an object, righ?
Gabriele
7-Nov-2006
[1273x2]
or a block [last-name "Santilli"]
depending on your needs :)
Pekr
7-Nov-2006
[1275x4]
I was really tired by Bobik, who leaving rebol just slanders it, 
without proper deep knowledge of what session actually is. He reported 
to various other friends, that Rebol is terrible, because it is the 
only language not actually supporting sessions. Yesterday I looked 
into what "sesssions" mean in php terms, and I have to laugh - for 
me it is matter of few hours coding at max, to get it working ...
but that is overally problem of Rebol - while with other languages, 
e.g. python, he is willing to import particular library, with rebol 
he just states, that such a thing should be inside ...
while he is negative, the positive thing for me is, that his opinion 
means, he likes compact design of Rebol in fact, and regards it being 
a platform in itself :-)
As you mentioned Temple - it sleeps for last two or so years, or 
not? Is there any newer version available?
Gabriele
7-Nov-2006
[1279]
no new version. i don't think i'll have time for it.
Pekr
7-Nov-2006
[1280]
working on R3, right? :-)
Graham
7-Nov-2006
[1281x6]
your friend Bobik didn't really have a good understanding of Rebol.
and we know that some people never get it sufficiently to be proficient 
enough
Vanilla has session support ...
rebol.org may as well.
I'm sure I read articles before on how one might do sessions server 
side.
Cheynne also has sessions ...
Maxim
7-Nov-2006
[1287x2]
graham, yes many people try to use a new language like they've always 
done before... in any C derivative that works... cause basically 
you aren't doing anything differerently just writting it differently 
(java, perl, python)  but in others, you have to adapt and well... 
it doesn work!
trying to use french grammar with german words... wont work, obviously. 
 although they both have a similar male/female noun particularity.
Oldes
11-Nov-2006
[1289]
What's the problem with sessions? I'm not using PHP native sessions, 
It's just cookies anyway, you send something which identifies it 
on the other side. If someone say, that Rebol is bad, because there 
are no sessions, must be totally crazy. You don't even use cookies, 
you can send the id as a POST/GET variable. With Rebol I have much 
more control over the process. You can make SERVER in Rebol, but 
You cannot do that in PHP. So what, everything has it's own purpose.
Pekr
11-Nov-2006
[1290]
I know - but then some ppl would have to understand what is behind 
the sessions - and there really is not magic :-)
Sunanda
18-Dec-2006
[1291]
I've just added a script to REBOL.org that offers session support 
in a CGI environment:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=acgiss.r

Documentation: http://www.rebol.org/cgi-bin/cgiwrap/rebol/documentation.r?script=acgiss.r

And, yes, Petr, it really isn'y magic......Though I hope it is debugged. 
Please let me know otherwise.
Coccinelle
18-Dec-2006
[1292]
Session ID management can be very simple as this script : http://www.ladyreb.org/wiki/doku.php?id=safe-session.r

This script offer some protection against replay attack.
Sunanda
18-Dec-2006
[1293]
Thanks C. It is really easy isn't it?

The main differences between your approach and mine that I can see 
are:
1. you hold all data in one file; mine uses one file per session

2. you create just a cookie; mine creates a session record in which 
the CGI script can save data

Either way, the scripts demonstrate that the problem is really trivial 
-- with the one need to create unique and hard-to-guess session ids. 
 We've both put some serious code into doing that.
Pekr
13-Jan-2007
[1294x3]
Hi. Is it possible Google does not index properly our http://www.jablunkovsko.cz
site, because links to particular subsites are burried in java-script 
menu? I created account with google, and checked my robots.txt allows 
engine to visit my site ....
should I create sitemap in my google account for the particular domain?
example - try site:http://www.jablunkovsko.czbowling .... in google 
- only one link will show, whereas I would like the result to include 
(go to menu) "sport a relaxace"/bowling ....
Henrik
13-Jan-2007
[1297]
pekr, link to site is dead
Gabriele
13-Jan-2007
[1298]
petr, why not just including a simple html links somewhere in the 
page? you can even hide it with js, so that a user does not see the 
links, but a spider will.
Pekr
13-Jan-2007
[1299]
yes, that should work ... although I can imagine hiding the links 
... I will try to look at sitemap protocol - seems to be a standard 
...
Sunanda
13-Jan-2007
[1300]
Javascript only links will stop pretty much every spider.....So you 
won't appear in many search engines at all.

You will also be breaking a lot of people's assistive technologies 
(like screen readers for visually disabled people).

Best to have a site that is fully navigable via plain HTML links. 
Then add the clever stuff on top of that.
Google's advice:

http://www.google.com/support/webmasters/bin/answer.py?answer=35769
http://www.google.com/support/webmasters/
***

A high score here usually means you have  a person-friendly and spider 
friendly website:
http://www.cynthiasays.com/
Chris
13-Jan-2007
[1301]
Also, look up 'Progressive Enhancement' or 'Hijax', both describe 
techniques consistent with Sunanda's advice.
Pekr
13-Jan-2007
[1302]
thanks for advices - initially my friend maight use Gabriele's advice 
of storing hidden links into index.html somewhere, so that search 
engine can index the site properly.
Sunanda
13-Jan-2007
[1303]
But bear in mind the *specific* advice on the Google page:
<<Avoid hidden text or hidden links.>>
PeterWood
13-Jan-2007
[1304x3]
Is building and submitting a purpose built crawler page an outdated 
technique?
It must be easy enough to generate one in Rebol
..but it seems to be dissaproved of by Google
Sunanda
14-Jan-2007
[1307]
Search engines like to index things a user can see.

Thye get suspicious of anything that appears to be built just for 
the.....No surprising given how much they have been gamed by SERPS 
spammers.

Having a human-readable site map has the same effect as a crawler 
page *and* taks you a long way towards having a site that is navigable 
by people under any conditions.
***

The google-approved method of doing a crawler page is to use what 
they call a sitemap:
http://www.google.com/support/webmasters/bin/topic.py?topic=8476

Someone could easily modify Carl's site-checker to emit a google 
sitemap:

http://www.rebol.org/cgi-bin/cgiwrap/rebol/view-script.r?script=site-check.r
Oldes
16-Jan-2007
[1308]
How to reset variables sent from a form using POST method without 
redirecting into new page? I mean how to prevent, that using reload 
will resend the values again. I usualy just set location to other 
page after processing, but now I have case when I need to display 
informations without change of the location. I think I've seen somewhere 
that it's possible using http response, but cannot find it:(
Chris
16-Jan-2007
[1309]
I'm not sure of a single http header designed for this purpose.  
There are cache controls, but how long to set them for?  Or etags/if-none-match, 
but would that prevent the browser's resend warning?  Or a token 
value in your form that expires after one submission, though also 
would not prevent the resend warning.  Or sessions?
Oldes
16-Jan-2007
[1310]
never mind, I will do it in the way I do it usually, that means redirect 
to other page after processing of the upload
Volker
16-Jan-2007
[1311]
if there is nothing, you could id  the page and block further  replies 
 with the same id.
Chris
16-Jan-2007
[1312]
Volker, that is etags...
Volker
16-Jan-2007
[1313]
i guess i am clueless and beter  stop spamming. what is etags?^^
Henrik
16-Jan-2007
[1314]
compare the post values to the last sent post values?
Chris
16-Jan-2007
[1315]
Etags should work like this: client requests a resource, server returns 
resource and etag header.  Client again requests resource, but this 
time sends if-none-match header with etag value and server can then 
decide whether to process the request or send 304 not changed.  I 
haven't explored this much so don't know how well it's supported 
-- I'm not sure how appropriate the solution is, but would involve 
the least server activity.
Volker
16-Jan-2007
[1316]
ah
Oldes
16-Jan-2007
[1317]
the problem is, that if you are posting large file, it's not too 
good, as all file is first uploaded again and than you can decide, 
if you want it to store for example. I though I sow something, but 
maybe it was just a fata morgana, I thing, that the best is the redirect. 
My problem is, that I'm trying to connect on database, which was 
not designed by me, so there is no crypted id for the data I upload, 
just incremental integer, which I don't want to use, as I would give 
chance to everybody go thru the data just inserting other numbers. 
I have to take a risk, modify the original database adding ne column 
with crypted id and redirect to the uploaded data using this id. 
And hope, that I will find and modifie all places, where is this 
database used:(
Pekr
16-Jan-2007
[1318x2]
reload resends post data? I thought that to resend post data you 
have to press submit button :-)
nevertheless now I understand why I sometimes get double posts with 
some chat boards :-)