Hi there,

I had the same problem...now I'm sending a random valued cookie to the user's browser 
and to the user table in a database.

I compare the value of the cookie in the browser against the value in the database if 
it matches voila! it's the user.

You could use a text file to store the user/value pairs.

There's my two cents. I hope it helps.

Marcos

>>> "Wagner Garcia Campagner" <[EMAIL PROTECTED]> 10/10/01 11:04AM >>>
Hi,

I have three web pages, for example: login.html, page1.pl and page2.pl...

In the first page i send the username and the password to the page1.pl
through FORM POST METHOD:

<FORM NAME="formulario" METHOD="post" ACTION="page1.pl">
<table border="0" bgcolor="black" cellpadding="2">
<tbody><tr><td>
<table border="0" bgcolor="FBC900" cellspacing="0" cellpadding="15">
<tr><td>
<table border="0" bgcolor="FBC900" cellspacing="0" cellpadding="2">
<TR><TD align=right><FONT SIZE=3 COLOR=black><B>USER:</B></FONT></TD>
<TD><INPUT TYPE="text" NAME="username" VALUE="" SIZE=10></TD></TR>
<TR><TD align=right><FONT SIZE=3 COLOR=black><B>PASSWORD:</B></FONT></TD>
<TD><INPUT TYPE="password" NAME="passwd" VALUE="" SIZE=10></TD></TR>
<TR><TD COLSPAN=2 ALIGN=CENTER><INPUT TYPE="submit" value="OK"></TD></TR>
</table>
</td></tr></table>
</td></tr></tbody></table>
</form>


So i get this in page1.pl as follos:


$name = param('username');
$pass = param('passwd');

if (($name eq 'gest') && ($pass eq 'password'))

Only if user=guest and pass=password the page is displayed otherwise it is
redirected to another page...

Now what i want to do is send this username and password to the
page2.html...

I'm doing like this:

<FORM METHOD=post ACTION=page2.pl>
<INPUT TYPE=hidden NAME=username VALUE=$nome>
<INPUT TYPE=hidden NAME=password VALUE=$pass>
<INPUT TYPE="submit" value="OK">

The problem is when i do "view source" on the page1.pl I can see the
username and the password in plain text....

Is there a way for me to pass this information to page2.pl without everyone
see it when "view source" is used???

Thanks in advance and forgive me for this long text,

Wagner.





--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to