You can use Crypt::CBC in combination with another module like Crypt::Blowfish or Crypt::IDEA to encrypt you data. That prevents the user from being able to read it in html or cookies. On the other hand; If you use LWP::UserAgent you shouldn't have to worry about the user seeing the data. The server that the cgi resides on retrieves the data from the other CGI, on the same server or not, and then can pass on all or part of the data to the user. All this happens transparent to the user, so any passwords exchanged between the CGI's are not in the reach of the user. However, like any other password exchange over HTTP, it can be caught by a 3rd party if you send the data in clear text. If you use SSL, then you can ease these fears. A very simple example taken from lwpcook (perldoc lwpcook) shows how to get a page using basic authorization: use LWP::UserAgent; $ua = new LWP::UserAgent; $req = new HTTP::Request GET => 'http://www.sn.no/secret/'; $req->authorization_basic('aas', 'mypassword'); print $ua->request($req)->as_string; You could also send authorization using post or get. --Tom On Wed, 6 Sep 2000, Rene Saenz wrote: > Do any of you know how to pass sensitive information > from one cgi to another like logins and passwords ??? > Meaning, how do you hide or encrypt that info in order > for the user not to see that information > > Rene > > __________________________________________________ > Do You Yahoo!? > Yahoo! Mail - Free email you can access from anywhere! > http://mail.yahoo.com/ >
