Hello fellow Embperl users!

  Recently, I have noticed several threads of discussion around session
management and I want to present an alternate mechanism for managing a
user's session.  I have built a simple alternative to using cookies or URL
re-writing that seems SO simple that there must be something wrong with it.
I got the idea while reading about AliasMatch in the apache documentation.
Although it might not have been intended to be used this way, AliasMatch
allows you to embed information within the page's URL like this:

In httpd.conf:
...
Alias      /mysite                  /www/mysite/html
AliasMatch ^/mysite-sess/[^/]+/(.*) /www/mysite/html
...

Example URL:
http://www.clepsydras.com/mysite-sess/abc123xyz/welcome.epl

abc123xyz is arbitrary information, dynamically generated (I use MD5 with a
random number) as the user's session key.  It is easy to extract the session
key from the URL and use it as a key into a table or as a file name.

I have build a package; SessionManager.pm that provides similar
functionality as Apache::Session and $udat.  It can be downloaded from here:

http://www.clepsydras.com/sessmgr.tgz

and you can see a simple example running here:

http://www.clepsydras.com/mysite/welcome.epl

Surely it isn't as easy as this package makes it look, am I missing
something?  Any feedback would be appreciated.

Eric Lowry
[EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to