Re: [SLUG] Passwords on the web

From: Bryan J. Smith (b.j.smith@ieee.org)
Date: Fri Sep 24 2004 - 14:26:17 EDT


On Fri, 2004-09-24 at 13:18, Chad Perrin wrote:
> I suspect they don't want to play for SSL management with a webhost,

(pay?) Then self-cert. Not hard at all.

> and it's possible that they don't have easy access to .htaccess files by
> way of (for instance) PERL/CGI scripts (which would be the simple way
> to manage .htaccess permissions through a web interface).

In other words the global config is not looking for them, so they can't
simply plop one down.

> Still, a reasonably secure permissions system can be written in either
> PERL (for the cgi-bin) or PHP without too much difficulty. Unless
> you're planning on running most of the site through the cgi-bin, though,
> I'd probably recommend using PHP for this task. PHP actually includes
> some tools specifically for designing secure access management into a
> website, and they work fairly well.

Agreed.

-- 
Bryan J. Smith                                  b.j.smith@ieee.org 
------------------------------------------------------------------ 
"Communities don't have rights. Only individuals in the community
 have rights. ... That idea of community rights is firmly rooted
 in the 'Communist Manifesto.'" -- Michael Badnarik

----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:01:23 EDT