[lists] Re: [clo-devel] Getting clhp installed on Apache

[Mario Mommer]

Anthony Ventimiglia <anthony at ventimiglia.org> writes:
> Nikodemus Siivola writes:
>  > On Thu, Nov 13, 2003 at 09:03:36AM -0500, Anthony Ventimiglia wrote:
>  > 
>  > That said, wearing my voting hat:
>  > 
>  >  I don't know. 
>  > 
>  >  How important is it to you? Is this "vital", or "kind of neat"?
>  > 
>  >  How much overhead for Erik (on the long run)? If we do this, will it generate
>  >  good infrastructure that can be utilized in the future, or will it be
>  >  a wart on the system?
> 
> I agree with both your questions and answers.

Me too.... :)

> In my previous post I gave some of the potential problems, which are
> no more of a risk than running CGI scripts. So it's a matter of
> trusting users who write clhp pages, and as I said before, I don't
> see why any of us would have malicious intents regarding the
> common-lisp.net server. If you guys are still uncomfortable with
> that, we can restrict the clhp-handler to only work in selected
> directories.

The problem is not necessarily one of us doing malicious things
intentionally (I guess that goes without saying :-) ) but
unintentionally by screwing up (c.f. Murphy's Law). So yes, it has to
be sandboxed.

> As far as the infrastructure, I think that it would be a benifit to us
> all to have it available on the server. Sure we could use PHP to
> provide the same functionality, but I'd assume that most of us would
> rather use Lisp than PHP. 

Yes, that is true.

Regards,
        Mario.