Hi all.

Could some one have a look at the following code and tell me my the 3rd
script can't read the cookie and allow me to access the page?  Basically
I am sure I am not doing anything wrong.  I can see the cookie set in my
browser through the users windows explorer.  It looks the same as
this...

test
test
'path'
0
1157283456
29448914
789082896
29448899

Is there a problem with the third script?  It doesn't seem to be
populating $user?

Any suggestions or comments would be creatly appriciated.

Kind regards,

Daniel Falkenberg

FIRST SCRIPT.cgi - LOGIN PAGE

#Normal stuff here #!/usr/bin...

my $username = "test";
my $password = "test";
my $user     = param('username');
my $pass     = param('password');

logout()              if($action eq "logout");
login_page()          unless($pass);

my $valid = Check_Login($user, $pass);
if($valid) {
  my $cookie = Create_Cookie("+30m", $user);
  print redirect(-uri=>"safilm", -cookie=>$cookie);
  exit;
}
else{
  my $time = time();
  print redirect(-uri=>"login?$time");
  exit;
}

sub logout{
   my $time = time();
   my $cookie = Create_Cookie("-30m", "");
   print redirect(-uri=>"login?$time", -cookie=>$cookie);
   exit;
}

sub Create_Cookie{
  my $exp = shift;
  my $val = shift;
  my $cookie = cookie ( -name    => 'test',
                        -value   => $val,
                        -expires => $exp,
                        -path    => ''
                        );
  return($cookie);
}

sub Check_Login{
    my $user = shift;
    my $pass = shift;
    ($password eq $pass) ? return 1 : return 0;
}

sub login {
        print header();
        print<<HTML;
        #form here...
HTML
}

SCRIPT 2.pl - SHARED FILE

sub Check_Cookie{
  my $user = cookie('test');
  if ($user){
    return($user);
  }
  else{
    print redirect(-uri=>"login");
    exit;
  }
}

1;

SCRIPT 3.cgi - MAIN PAGE

#Normal stuff here #!/usr/bin...

my $user          = Check_Cookie();
my $action        = param('action');

print header();
print<<HTML;
#Html crud here
HTML



==============================
VINTEK CONSULTING PTY LTD
(ACN 088 825 209)
Email:  [EMAIL PROTECTED]
WWW:    http://www.vintek.net
Tel:    (08) 8523 5035
Fax:    (08) 8523 2104
Snail:  P.O. Box 312
        Gawler   SA   5118
==============================


--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to