Beefy Boxes and Bandwidth Generously Provided by pair Networks
Clear questions and runnable code
get the best and fastest answer

Re: CGI Session 'security' for in-house app.

by arashi (Priest)
on Jul 06, 2001 at 00:29 UTC ( #94259=note: print w/ replies, xml ) Need Help??

in reply to CGI Session 'security' for in-house app.

I asked a similar question a while back. There were many great responses, I found one of merlyn's columns (Web Techniques Column 61 - May 2001) in his The Web Techniques Perl Columns to be very helpful.

I think you're on the right track. Here's what I think would be a good approach to the problem:

  • Users login to the system.
  • The system validates the user's name and password and assigns a session key into a cookie and a log file. (see merlyn's column)
  • Every time the user goes to a page, the CGI checks the cookie and compares it to the log file, if the user is valid, it will render the page. If the user doesn't validate, the form won't even render for them. This should stop any wandering users for "accidentally" finding a form and submitting data to it.
Hope this helps.


I'm sure Edison turned himself a lot of colors before he invented the lightbulb. - H.S.

Comment on Re: CGI Session 'security' for in-house app.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://94259]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others making s'mores by the fire in the courtyard of the Monastery: (6)
As of 2015-09-04 00:40 GMT
Find Nodes?
    Voting Booth?

    My preferred temperature scale is:

    Results (128 votes), past polls