On 2003-10-15, David Christensen <[EMAIL PROTECTED]> wrote: > hello, world! > > I'm working on an e-commerce site using Apache 1.3.26, Perl 5.6, > CGI::Application, HTML::Template, and CGI::FormBuilder. I need to > provide secure user login/logout, profiles, financial pages, etc.. For > starters, I plan to use https for sensitive pages. After that, I'm not > sure which way to go. I would prefer using a standard CPAN module, such > as CGI::Session and/or CGI::Session::Auth. > > What experiences, recommendations, comments, criticisms, and/or > suggestions do the list readers have in the areas of user authentication > and session management using Perl and CGI? Does anyone have URL's for > some good articles, tutorials, etc.?
Some users on this list contributed to this related Wiki page: http://twiki.med.yale.edu/twiki2/bin/view/CGIapp/SessionsWithCgiApp CGI::Session is what I'm beginning to use myself. The only thing I didn't like was the way it stored the data in Postgres. I wrote CGI::Session::PureSQL to fix this, but it hasn't been formally released yet. My understanding of CGI::Session::Auth is that extends the functionalty of CGI::Session with a few extra functions. Next time I need CGI::Session, I plan to look at ::Auth as well. I also recommend looking into Data::FormValidator as an alternative to the validation of CGI:::FormBuilder (it does validation, too, right?). D::FV seems to be a popular choice with the CGI::App users here. But don't ask me, I'm biased. :) Mark -- . . . . . . . . . . . . . . . . . . . . . . . . . . . Mark Stosberg Principal Developer [EMAIL PROTECTED] Summersault, LLC 765-939-9301 ext 202 database driven websites . . . . . http://www.summersault.com/ . . . . . . . . --------------------------------------------------------------------- Web Archive: http://www.mail-archive.com/[EMAIL PROTECTED]/ http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2 To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
