Postgres Pro
Downloads
Home   >   mailing lists

Thread: WEB-interface

WEB-interface

From
"Sergei Chernev"
Date:
Greetings,

I want to do WEB-interface to postgresSQL 6.4.2 using perl.
I can do one level web-page, so you can say Username/Password and
read some data from database.
But if I want to create subform, I have to know username/password again.
Now, I'm solving this problem transmitting <input type="hidden"> back
to client - but this method is wrong.
I'm using apache web server on bsdi-3.1.

Thank you,
-----------------
Sergei Chernev
Internet: ser@nsu.ru
Phone: +7-3832-397354

Re: [INTERFACES] WEB-interface

From
The Hermit Hacker
Date:
On Thu, 15 Apr 1999, Sergei Chernev wrote:

> Greetings,
>
> I want to do WEB-interface to postgresSQL 6.4.2 using perl.
> I can do one level web-page, so you can say Username/Password and
> read some data from database.
> But if I want to create subform, I have to know username/password again.
> Now, I'm solving this problem transmitting <input type="hidden"> back
> to client - but this method is wrong.
> I'm using apache web server on bsdi-3.1.

I've started to use .htaccess subdirectories more and more for doing this,
but you could also Cookie's for doign this...

Marc G. Fournier                   ICQ#7615664               IRC Nick: Scrappy
Systems Administrator @ hub.org
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org

Re: [INTERFACES] WEB-interface

From
Michael Robinson
Date:
"Sergei Chernev" <ser@nsu.ru> writes:
>But if I want to create subform, I have to know username/password again.
>Now, I'm solving this problem transmitting <input type="hidden"> back
>to client - but this method is wrong.

Make an MD5 checksum of the username, password, and current time.  Send the
MD5 checksum in a hidden field (or use a cookie).  Keep a server-side cache
of the currently valid checksums (expire the old ones periodically), and
check the incoming checksum against the cache for each request.

    -Michael Robinson