Torsten Zühlsdorff <thornythegod@arcor.de> writes:
>
> That means that i need a little web server behind my apache-webserver?

No, but that's the way many of them work. mod_lisp takes another
approach--it talks directly from Apache to a running Lisp instance--but
frankly I never had much luck getting it working under my setup. And
it's kinda nice having a little web server--makes testing and
development a bit easier.

A similar setup is used for Pylons, a Python web development framework:
the paste web server is run behind the scenes and Apache (or whatever)
sits in front of it.

You could if you wanted _just_ run the Lisp webserver, but I like having
Apache in front, as it offers a lot of nice features.

> Is CLSQL a part/libaray/included in the mentioned environments. How
> about CLOS?

CLSQL is a package available online; Google will lead you to it, or
(once you have asdf & asdf-install working) you can simply run
(asdf-install:install :clsql).

>> Session hijacking is at the TCP level (and I'm guessing so is RCE), so
>> no, Lisp buys you nothing there--nor would any other language.
>
> When you say "at the TCP level" it sounds harder than it is. Just
> changing some cookie-values or urls.

Ah, you meant web sessions. I'm not familiar with the mechanism, so I
Googled a bit and the only references were to TCP/IP session hijacking.

> The questions was a little ironically, because the stealing of
> sessions and the injection of code in different ways is often a since
> for a bad programmer (or a too short night or many other reasons). I
> do not really beleave, that a language can protect us before this.

I daresay that you're probably correct, although I will note that, at
least for those Lisp frameworks I've used which provide sessions, one
doesn't need to write one's own session code--and hence one can rely on
the time and effort of someone else. So you & I needn't be great
programmers--just the guy who writes the framework.

>>>I have clisp on my Mandriva Linux, but if i use the given commands,
>>>clisp mentioned that there is no asdf.
>>
>> Here's where the Internet makes life easy. I googled "clisp asdf"
>> and one of the links was to <http://www.cliki.net/asdf>, which has
>> links to the source code and a howto. Once you have it installed,
>> it's pretty easy to use.
>
> I found this site too, but i always read about the needing of SBCL.

Well, different packages support different implementations. So if you
use several packages then you can only use an implementation supported
by _all_ of them (in mathematical terms you're limited to the
intersection of the sets of supported implementations). Today in the
free Lisp world it appears that the most commonly supported
implementations are SBCL and clisp.

> Otherwise it took a loooong time to see one of the linked site
> (between 5 and 15 minutes).

CLiki? Are you on a slow link? It's typically very fast for me.
Perhaps it's undergoing maintenance or is under attack from some script
kiddies.

--
Robert Uhl <http://public.xdi.org/=ruhl>
One foot is approximately the distance travelled by light in one nanosecond.
One metre is the distance travelled by light in 3.335641... nanoseconds.
Which is more scientific?