Re: Application Design for User Authentication

2002-08-30 Thread doug
I don't believe these considerations represent actual risks of using web-server based authentication (.htaccess files). - Once a user is authenticated, the script can still tell who they are, and assume roles based on that information. - There are many scripts out there that can manage NCSA/Ap

Re: Application Design for User Authentication

2002-08-30 Thread Gfoo
> > you have ruled out using .htaccess for some reason? > > > ciao > drieux > > --- > > I don't want to use .htaccess, because: - there are scripts that their actions depend on the role of the user that executes them. For example there is a script all users can execute it, but its outpu

Re: Application Design for User Authentication

2002-08-28 Thread drieux
On Wednesday, August 28, 2002, at 11:41 , Gfoo wrote: > You mean configuring the server (apache) to handle > authentication by calling some perl code? Will this let me have a page > full > of content and give the ability to the user viewing this page to POST its > credentials in order to login

Re: Application Design for User Authentication

2002-08-28 Thread fliptop
On 28 Aug 2002 at 18:41, Gfoo opined: G:I', planning to use mod_perl for speed. G:But... How can I keep the authentication routines I' ve written and have G:mod_perl to help me? You mean configuring the server (apache) to handle G:authentication by calling some perl code? Will this let me have

Re: Application Design for User Authentication

2002-08-28 Thread Gfoo
> > can you use mod_perl? > > intercepting the authentication step with mod_perl is very easy and > will accomplish exactly what you want to do. > I', planning to use mod_perl for speed. But... How can I keep the authentication routines I' ve written and have mod_perl to help me? You mean co

Re: Application Design for User Authentication

2002-08-28 Thread Gfoo
[EMAIL PROTECTED] (Margaret) wrote in 001301c24e8e$3c255f80$[EMAIL PROTECTED]:">news:001301c24e8e$3c255f80$[EMAIL PROTECTED]: > You can use the require '/usr/local/.../auth.pl'. In the auth.pl put in > the code to authenticate the user and then run that subroutine from the > original script and

Re: Application Design for User Authentication

2002-08-28 Thread fliptop
On Wed, 28 Aug 2002 at 15:46, Oleksiy Rudenko opined: OR:Where could I as a beginner read more about mod_perl? Sources in plain OR:English appreciated. OR:Thanx. perl.apache.org is a good place to start. -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PRO

Re: Application Design for User Authentication

2002-08-28 Thread Oleksiy Rudenko
Hi. fliptop wrote: >On 28 Aug 2002 at 11:57, Gfoo opined: > >G:I'm creating a web appication in Perl (and CGI). > > Where could I as a beginner read more about mod_perl? Sources in plain English appreciated. Thanx. >can you use mod_perl? > >intercepting the authentication step with mod_perl is

Re: Application Design for User Authentication

2002-08-28 Thread fliptop
On 28 Aug 2002 at 11:57, Gfoo opined: G:I'm creating a web appication in Perl (and CGI). G:I' ve written code that is used to create and read sessions (by using G:cookies or GET http method) which are used after authenticating user logins G:in a database. G:The code for handing transitions and

Re: Application Design for User Authentication

2002-08-28 Thread Margaret
or package. - Original Message - From: "Gfoo" <[EMAIL PROTECTED]> To: <> Sent: Wednesday, August 28, 2002 1:57 PM Subject: Application Design for User Authentication > Hello all, > > I'm creating a web appication in Perl (and CGI). > I' ve written c

Application Design for User Authentication

2002-08-28 Thread Gfoo
Hello all, I'm creating a web appication in Perl (and CGI). I' ve written code that is used to create and read sessions (by using cookies or GET http method) which are used after authenticating user logins in a database. The code for handing transitions and state is about 60 lines of code. I