authentication

[Bob Smith]

hiya all
could some kind sole give some guidance as how to implement user
authentication for a perl web app running mysql RDBMS.
some pointers in the correct direction would be *nighly* appreciated.
( did have a look at www::authenticate but don't know if it is good or
not. )
tia
/B

 

[James Willmore]

hiya all
could some kind sole give some guidance as how to implement user
authentication for a perl web app running mysql RDBMS.
some pointers in the correct direction would be *nighly*
appreciated.( did have a look at www::authenticate but don't know if
it is good or not. )

Go to http://www.w3c.org/Security/Faq/www-security-faq.html and read
it over. This is a good "primer" on web security.

Also look over persec to get a better idea of security in relation to
Perl.

Then look over the DBI module's documentation.

If you have more specific questions after that, post them here.

HTH

--
Jim

Copyright notice: all code written by the author in this post is
released under the GPL. http://www.gnu.org/licenses/gpl.txt
for more information.

a fortune quote ...
If I had any humility I would be perfect. -- Ted Turner

 

[Bob Smith]

Go to http://www.w3c.org/Security/Faq/www-security-faq.html and read
it over. This is a good "primer" on web security.

Also look over persec to get a better idea of security in relation to
Perl.

Then look over the DBI module's documentation.

If you have more specific questions after that, post them here.

thank's jim for the link and info. As the subject of network security is
large I prefer to make the approach in small steps, so for now I am only
interested in validating users properly.
so if anyone has information as to how to validate users visiting the
site I'd be grateful. thank's
/B

 

[James Willmore]

thank's jim for the link and info. As the subject of network
security is large I prefer to make the approach in small steps, so
for now I am only interested in validating users properly.
so if anyone has information as to how to validate users visiting
the site I'd be grateful. thank's
/B

Again, read the DBI documentation. Your question is answered there.

Most, if not all script I've written/seen validate one user on the
server side. The forms that are presented are designed to guide the
user to update some/all fields in a database -or- allow users to
browse - all under one account. To do user validation and database
access is no small affair.

The "quick and dirty" way to do it is use an Apache module designed to
maintain state between pages or htaccess. Passed that, you may get a
better answer in a CGI authoring newsgroup.

--
Jim

Copyright notice: all code written by the author in this post is
released under the GPL. http://www.gnu.org/licenses/gpl.txt
for more information.

a fortune quote ...
The fortune program is supported, in part, by user contributions
and by a major grant from the National Endowment for the
Inanities.