Re: [cgiapp] checking passwords using SQL

2002-12-19 Thread Mark Stosberg
On Thu, 19 Dec 2002, Thilo Planz wrote: A little bit of an optimization and security check - if all you are doing is comparing if the username and password match, why not let SQL do it? my $query = SELECT count(*) FROM user WHERE USER_ID = ? and USER_PASSWORD = ?; my

RE: [cgiapp] cgiapp_prerun (SOLVED !!!)

2002-12-19 Thread Franki
Hi guys, I worked out a way to stop two id files beging created by cgiapp_prerun Its expensive in that it destroys an id it just created if the user hasn't logged in... but it works well enough.. and if the user has logged in, then it does nothing. sub cgiapp_prerun { my $self = shift;

Re: [cgiapp] checking passwords using SQL

2002-12-19 Thread Brian . T . Wightman
Unless there is something set in my Oracle startup, I would like to differ :) 1* select 'yes' from DUAL where 'A' = 'a' cms sql / no rows selected cms sql c$'A'$'a' 1* select 'yes' from DUAL where 'a' = 'a' cms sql / 'YE --- yes

RE: [cgiapp] checking passwords using SQL

2002-12-19 Thread Sabherwal, Balvinder (MBS)
It depends how you have configured the Oracle Server. It has both the options and can run in case insensitive or case sensitive. Ask the DBA in your area as how they have configured the servers. HTH. Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent:

RE: [cgiapp] cgiapp_prerun (SOLVED !!!)

2002-12-19 Thread Franki
Lol,, I'm an idiot... sometimes you stare at something so long, you can't see the wood for the trees.. All I had to do was this..: sub cgiapp_prerun { my $self = shift; my $form_parameters = $self-query(); my ($session_id, $session) = get_ID($form_parameters); # If they are

Re: [cgiapp] Forcing a login...

2002-12-19 Thread Mark Stosberg
On Thu, 19 Dec 2002, Franki wrote: I tried to setup cgiapp_prerun so that if the user isn't about to see the login page, or they are not already logged in.. they get sent to the login mode... If you want a real-live code example of handing this problem space, you can look at Cascade:

RE: [cgiapp] Forcing a login...

2002-12-19 Thread Franki
Cool, I'm checking it out as we speak... thankyou. rgds Frank -Original Message- From: Mark Stosberg [mailto:[EMAIL PROTECTED]] If you want a real-live code example of handing this problem space, you can look at Cascade: http://summersault.com/software/cascade/ I wrote ite before the