is Apache::Session or CGI::Session better for mod_perl?

Thanks.

Both work. CGI::Session was better maintained for a while but it
looks like Apache::Session has been updated recently. Pick the one
that you find easiest to understand from the documentation.

- Perrin

2010/10/29 Jeff Pang <jeff_pang [at] sina.com>:
> is Apache::Session or CGI::Session better for mod_perl?
>
> Thanks.
>

try a framework. that's much more popular. :)

On Fri, Oct 29, 2010 at 8:20 PM, Perrin Harkins <perrin [at] elem.com> wrote:
> Both work. =C2=A0CGI::Session was better maintained for a while but it
> looks like Apache::Session has been updated recently. =C2=A0Pick the one
> that you find easiest to understand from the documentation.
>
> - Perrin
>
> 2010/10/29 Jeff Pang <jeff_pang [at] sina.com>:
>> is Apache::Session or CGI::Session better for mod_perl?
>>
>> Thanks.
>>
>



--
Fayland Lam // http://www.fayland.org/

于 2010-10-29 20:28, Fayland Lam 写道:
> try a framework. that's much more popular. :)
>

I wrote a small application with few scripts.
A framework like catalyst is too large to use for me.
Thanks.

Jeff.

于 2010-10-29 20:20, Perrin Harkins 写道:
> Both work. CGI::Session was better maintained for a while but it
> looks like Apache::Session has been updated recently. Pick the one
> that you find easiest to understand from the documentation.
>

I know CGI::Session well.
But have been thinking does Apache::Session get better performance under
modperl?

Thanks.

Jeff.

try Dancer. which is very suitable for small application. just one file.

Thanks

On Fri, Oct 29, 2010 at 8:37 PM, Jeff Pang <jeff_pang [at] sina.com> wrote:
> ä=BA=8E 2010-10-29 20:28, Fayland Lam =E5=86=99=E9=81=93:
>>
>> try a framework. that's much more popular. :)
>>
>
> I wrote a small application with few scripts.
> A framework like catalyst is too large to use for me.
> Thanks.
>
> Jeff.
>
>



--
Fayland Lam // http://www.fayland.org/

On Fri, Oct 29, 2010 at 8:39 AM, Jeff Pang <jeff_pang [at] sina.com> wrote:
> I know CGI::Session well.
> But have been thinking does Apache::Session get better performance under
> modperl?

I haven't measured it, but I doubt there's any significant performance
difference. Don't be fooled by the "CGI" in CGI::Session.

- Perrin

于 2010-10-29 20:42, Fayland Lam 写道:
> try Dancer. which is very suitable for small application. just one file.
>

Ok I will check out it.
I first time knew Dancer from ruby 2 years ago.
Never know that there is a perl execution of that.

--- On Fri, 10/29/10, Fayland Lam <fayland [at] gmail.com> wrote:
> try Dancer. which is very suitable
> for small application. just one file.

One file containing:
"""
use Dancer::Config;
use Dancer::FileUtils;
use Dancer::GetOpt;
use Dancer::Error;
use Dancer::Helpers;
use Dancer::Logger;
use Dancer::Plugin;
use Dancer::Renderer;
use Dancer::Response;
use Dancer::Route;
use Dancer::Serializer::JSON;
use Dancer::Serializer::YAML;
use Dancer::Serializer::XML;
use Dancer::Serializer::Dumper;
use Dancer::Session;
use Dancer::SharedData;
use Dancer::Handler;
use Dancer::ModuleLoader;
"""
which isn't "one file" by my reckoning. Nevertheless, it looks very interes=
ting. I will try a toy applet with it this weekend. Thanks for mentioning i=
t.

Phil

> On Fri, Oct 29, 2010 at 8:37 PM, Jeff Pang <jeff_pang [at] sina.com>
> wrote:
> > ä=BA=8E 2010-10-29 20:28, Fayland Lam =E5=86=99=E9=81=93:
> >>
> >> try a framework. that's much more popular. :)
> >>
> >
> > I wrote a small application with few scripts.
> > A framework like catalyst is too large to use for me.
=0A=0A=0A

--0016e6dee6d6dcd8790493c73a20
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Haven't used any of the popular session modules in awhile.
Are these susceptible to the cleartext cookie silliness exposed by
FireSheep?

"Great Artists Ship"
Lon Koenig lon [at] schnoggo.com http://lonk.me <http://lonkoenig.com>



On Fri, Oct 29, 2010 at 7:47 AM, Jeff Pang <jeff_pang [at] sina.com> wrote:

> ä=BA=8E 2010-10-29 20:42, Fayland Lam =E5=86=99=E9=81=93:
>
> try Dancer. which is very suitable for small application. just one file.
>>
>>
> Ok I will check out it.
> I first time knew Dancer from ruby 2 years ago.
> Never know that there is a perl execution of that.
>
>

--0016e6dee6d6dcd8790493c73a20
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Haven't used any of the popular session modules in awhile.<br>Are these=
susceptible to the cleartext cookie silliness exposed by FireSheep?<br><br=
><div id=3D"WISESTAMP_SIG_8447"><span style=3D"font-size: 13.3px; font-fami=
ly: Verdana,Arial,Helvetica,sans-serif;"><div style=3D"background-color: rg=
b(248, 248, 248); padding: 0.8em 0.8em 0.3em;">
<div style=3D"margin: 0pt 0pt 8px;"><font style=3D"font-family: trebuchet m=
s,sans-serif;" color=3D"#888888">"Great Artists Ship"<br><span st=
yle=3D"color: rgb(0, 0, 0);">Lon Koenig</span> =C2=A0 =C2=A0 <a href=3D"mai=
lto:lon [at] schnoggo.com" target=3D"_blank">lon [at] schnoggo.com</a><span style=3D"=
color: rgb(0, 0, 0);"></span>=C2=A0 <a href=3D"http://lonkoenig.com" target=
=3D"_blank">http://lonk.me</a></font></div>
<br></div><img src=3D"http://s.wisestamp.com/pixel.png?p=3Dmozilla&v=3D=
2.0.3&t=3D1288383536168&u=3D6544412&e=3D8000" height=3D"1" widt=
h=3D"1"></span></div><br><br><div class=3D"gmail_quote">On Fri, Oct 29, 201=
0 at 7:47 AM, Jeff Pang <span dir=3D"ltr"><<a href=3D"mailto:jeff_pang [at] s=
ina.com">jeff_pang [at] sina.com</a>></span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">ä=BA=8E 2010-10=
-29 20:42, Fayland Lam =E5=86=99=E9=81=93:<div class=3D"im"><br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
try Dancer. which is very suitable for small application. just one file.<br=
>
<br>
</blockquote>
<br></div>
Ok I will check out it.<br>
I first time knew Dancer from ruby 2 years ago.<br>
Never know that there is a perl execution of that.<br>
<br>
</blockquote></div><br>

--0016e6dee6d6dcd8790493c73a20--

On Fri, Oct 29, 2010 at 4:23 PM, Lon Koenig <lon [at] schnoggo.com> wrote:
> Are these susceptible to the cleartext cookie silliness exposed by FireSheep?

Well, Apache::Session doesn't handle cookies at all, so it's entirely
up to you how you want to deal with it, and CGI::Session doesn't
dictate whether or not your site uses SSL, so that is also up to you.

There is no way to prevent people from potentially seeing cookies (or
anything else) passed over a non-SSL network. Sites that are
seriously concerned about this should use SSL. Even sites that don't
use SSL should use cookies with some form of MAC and a reasonable
session timeout.

- Perrin