Hello,
I'm a data-structures course TA trying to write a python CGI script
for automatically compiling and testing students' projects.
Unfortunately, I've run into some questions while writing this, which I
couldn't solve with the various (and helpful) python-CGI documentation.
(It's possible that I'm posting to the wrong group; if so, I'd
appreciate suggestions for the appropriate group.)
1. In my HTML page, I have the following:
<form method="post" action="submiss ion_processor.p y"
enctype="multip art/form-data">
....
</form>
In the above, submission_proc essor.py is the python CGI script. I
didn't write a URL in the action field, since I'm first testing
everyting on a local machine (running FC4). The first line of
submission_proc essor.py is
#!/usr/bin/python
and I've done
chmod +x submission_proc essor.py
When I hit the "submit" button, my browser (Firefox on FC4) doesn't
run the script; it asks me whether it should open
submission_proc essor.py or save it to disk. I couldn't figure out why.
2. My HTML page has the option for an instructor to list the various
submissions and scores. Obviously, this should be inaccessible to
students. The instructor has a password for doing this, therefore.
Suppose I place the password inside a python script, and give this
script only +x permission for others. Is this adequate as far as security?
Thanks in advance for answering these questions.
Efrat 2 2014
Efrat Regev wrote: Hello,
I'm a data-structures course TA trying to write a python CGI script for automatically compiling and testing students' projects. Unfortunately, I've run into some questions while writing this, which I couldn't solve with the various (and helpful) python-CGI documentation. (It's possible that I'm posting to the wrong group; if so, I'd appreciate suggestions for the appropriate group.)
1. In my HTML page, I have the following:
<form method="post" action="submiss ion_processor.p y" enctype="multip art/form-data"> ... </form>
In the above, submission_proc essor.py is the python CGI script. I didn't write a URL in the action field, since I'm first testing everyting on a local machine (running FC4). The first line of submission_proc essor.py is
#!/usr/bin/python
and I've done
chmod +x submission_proc essor.py
When I hit the "submit" button, my browser (Firefox on FC4) doesn't run the script; it asks me whether it should open submission_proc essor.py or save it to disk. I couldn't figure out why.
You also have to have the executable script inside a directory that is
recognised as being a script directory (usually achieved with an Apache
ScriptAlias directive), or have the server otherwise recognise .py files
as executable (just setting the +x mode bit isn't enough).
In the absence of such knowledge the server just returns the content of
the file rather than the content produced by *executing* the file.
2. My HTML page has the option for an instructor to list the various submissions and scores. Obviously, this should be inaccessible to students. The instructor has a password for doing this, therefore. Suppose I place the password inside a python script, and give this script only +x permission for others. Is this adequate as far as security?
That depends on whether you wanted to use HTTP security (provided
automatically by the web server) or application security (provided by
your code).
In the case of a script which is for general running but where some of
the script's functionality shouldn't be generally available you are
stuck with the latter. It's OK to have passwords in your script as long
as you are sure that the script isn;t going to be served up as content
like it currently is! Thanks in advance for answering these questions.
Efrat
regards
Steve
--
Steve Holden +44 150 684 7255 +1 800 494 3119
Holden Web LLC www.holdenweb.com
PyCon TX 2006 www.python.org/pycon/
Efrat,
I am afraid a CGI script is never *executed* by the browser. Instead, it sends
the URL to a server, expects the server to execute the script, and display the
server's response. If you just put a file name then (it seems, I never even
tried that) Firefox uses the local file store as a 'server' in that respect.
If you want to test a CGI script on your own machine, you should run a web
server on your own machine. That server should also be set up in a way that it
recognizes a '.py' file as a CGI script to be executed by Python (not all
servers may recognize the #! trick...).
This may look scary, but it is not that bad. Apache has a number of precompiled
binary versions that you can install on your machine; you can also use servers
like W3C's jigsaw (this relies on Java) or others. These are all free and easy
to install and, well, manageable to configure. Actually, in case you run on a
MacOS X by any chance, Apache is already installed afaik...
I hope this helps
Ivan
-------- Original Message --------
From: Efrat Regev <ef*********@ya hoo.com>
To:
Subject: Python CGI Script
Date: 30/9/2005 12:50 Hello,
I'm a data-structures course TA trying to write a python CGI script for automatically compiling and testing students' projects. Unfortunately, I've run into some questions while writing this, which I couldn't solve with the various (and helpful) python-CGI documentation. (It's possible that I'm posting to the wrong group; if so, I'd appreciate suggestions for the appropriate group.)
1. In my HTML page, I have the following:
<form method="post" action="submiss ion_processor.p y" enctype="multip art/form-data"> ... </form>
In the above, submission_proc essor.py is the python CGI script. I didn't write a URL in the action field, since I'm first testing everyting on a local machine (running FC4). The first line of submission_proc essor.py is
#!/usr/bin/python
and I've done
chmod +x submission_proc essor.py
When I hit the "submit" button, my browser (Firefox on FC4) doesn't run the script; it asks me whether it should open submission_proc essor.py or save it to disk. I couldn't figure out why.
2. My HTML page has the option for an instructor to list the various submissions and scores. Obviously, this should be inaccessible to students. The instructor has a password for doing this, therefore. Suppose I place the password inside a python script, and give this script only +x permission for others. Is this adequate as far as security?
Thanks in advance for answering these questions.
Efrat This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: Erik Johnson |
last post by:
This is somewhat a NEWBIE question...
My company maintains a small RDBS driven website. We currently generate
HTML using PHP. I've hacked a bit in Python, and generally think it is a
rather cool language. I've done Perl and like it, there are a few features
of PHP I like but overall am not too excited about it. I have found PHP's
strtotime() function to be quite flexible and handy and we make liberal use
of it.
I have not yet really...
|
by: DeepBleu |
last post by:
When one is using an HTML form via a web broswer, the user submits the form
contents and these are passed to a CGI Python script on the web server.
I need to write a client script that connects to a web site, runs a Python
CGI script on the web server AND passes a string to the CGI Python script
that the Python CGI script can store/manipulate/evalute etc....
I know how to connect to the web site and run the CGI Python script using a
client...
|
by: Olivier Scalbert |
last post by:
Hello ,
What is the python way of doing this :
perl -pi -e 's/string1/string2/' file
?
Thanks
Olivier
|
by: Tom Purl |
last post by:
I just wrote a Python script that is going to be called from bash script.
If the Python script fails, I want the bash script to also stop running.
Unfortunately, I can't seem to get that to work. Here's the script so
far:
# custom python script
/usr/bin/python /home/username/Dev/Python/packZODB.py \
-s"gsgmc.sigma.zettai.net" -b 7
# next program
|
by: Paul Rubin |
last post by:
Dumb question from a Windows ignoramus:
I find myself needing to write a Python app (call it myapp.py) that
uses tkinter, which as it happens has to be used under (ugh) Windows.
That's Windows XP if it makes any difference.
I put a shortcut to myapp.py on the desktop and it shows up as a
little green snake icon, which is really cool and Pythonic. When I
double click the icon, the app launches just fine and the tkinter
interface does...
| |
by: TPJ |
last post by:
First I have to admit that my English isn't good enough. I'm still
studying and sometimes I just can't express what I want to express.
A few weeks ago I've written 'Python Builder' - a bash script that
allows anyone to download, compile (with flags given by user) and
install Python and some external modules (e.g. wxPython, PyGTK,
Numeric...). I use Python every day and when new version of Python (or
some external module) is released, I...
|
by: krzychu |
last post by:
Hi,
I have installed brand new platform - Zope-2-7-6, Python 2.4.1, Plone
2.0.5, OS Debian 1:3.3.6-2.
After import a old Plone site from the following platform
Zope-2-7-4, Python 2.3.3, Plone 2.0.3 to the new one, I get error when
I visit PuthonScript in the ZMI.
"invalid syntax (Script (Python), line 1)"
|
by: manatlan |
last post by:
I've got a trouble, and i think that anybody there can help me
I've got a python script which i distribute in somes packages for *nix.
This script is full of python and need python 2.4 ! And i'd like to
display a message when the user doesn't have a python2.4 version.
if i put, at the top of the script (which can be done with /usr/bin env
too):
#/usr/bin/python2.4
|
by: John Salerno |
last post by:
I contacted my domain host about how Python is implemented on their
server, and got this response:
-------------------
Hello John,
Please be informed that the implementation of python in our server is
through mod_python integration with the apache.
These are the steps needed for you to be able to run .py script directly
|
by: tatamata |
last post by:
Hello.
How can I run some Python script within C# program?
Thanks,
Zlatko
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
| |
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
| |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |