perl_asp

This is part of The Pile, a partial archive of some open source mailing lists and newsgroups.



redhat-list@redhat.com

Subject: Re: apache with ASP
From: Jason Costomiris <jcostom@jasons.org>
Date: Tue, 12 Sep 2000 18:14:36 -0400

On Tue, Sep 12, 2000 at 02:05:20AM -0000, Peter Kiem wrote:
: >  Amazingly, yes. See http://www.apache.org/related_projects.html or jump 
: > straight to http://www.nodeworks.com/asp/. (Great, I have cable now!)
: 
: Actually Apache::ASP is useless for ASP in the real sense.  It is a PERL 
: based ASP so it is not the same beast.

No, actually it IS the same beast.

ASP is not dependent on any one language.  You can use perl, Javascript 
(really M$'s butchered clone - JScript), or language from hell, VBScript.

VBScript just happens to be the most popular ASP language, because they've
suckered so many people into VB, and now those people want to take their
stuff to the web.

BTW - If you install ActivePerl on an NT web server (www.activestate.com),
you can write your ASPs using perl, and it's even portable to Apache::ASP.

Why would you want to write your ASP code in perl?  What do most web apps
do?  Process text.  Let's see, you can use the (extremely feeble) string
handling of VBScript, or the (extremely powerful) string handling 
(including regexp)..  Tough choice, NOT!

: "Yes, but not with this perl module. For ASP with other scripting languages 
: besides perl, you will need to go with a commercial vendor in the UNIX world. 
: ChiliSoft at http://www.chilisoft.com/ has one such solution. Of course on 
: NT, you get this for free with IIS. "

I'm a big fan of the other "free features" that you get with IIS..  Such as:

- Ability to remotely grab any file on the same drive as the web docs
- Ability to download the ASP source code
- Ability to execute arbitrary code on the server
- Ability to upload a patched copy of netcat, exec it and then allow
  users to telnet to the server and get a command prompt!

All of these are available for use in a default installation of IIS on NT.
Sure, there are patches for those, but on 95+% of the servers out there,
they haven't been done.  See recent advisories on Bugtraq & NT-Bugtraq 
if you don't believe me.  Patches are good, but they do no good if those
who admin the servers don't *apply* them....

===


the rest of The Pile (a partial mailing list archive)

doom@kzsu.stanford.edu