"Barbara S. Chapman" <[EMAIL PROTECTED]> wrote:

>>2) a logon tool to validate, authorize or register a site user.....

Before I get started, and as no-one else has pointed it out yet you're
probably unaware that  this kind of question has it's own sub list -
web/cgi stuff should really be posted to:
[EMAIL PROTECTED]

But back to authentication scripts, this is pretty simple to do - I'm in
the middle of migrating to OSX , and with the contents of my HD spread all
over the place (I kinda feel like I'm moving house for some reason) I
couldn't find a sample script I kept to remind me how to do this kind of
thing, but the theory is basically:

[1] on UNIX you set up a '.htaccess' file for  a directory (folder)
containing the web site/docs whatever, you want to protect
[2] you write a CGI which throws up a form with two text boxes, one for the
U/name the other for the P/word
[3] when the users posts the data the cgi attempts to access the protected
directory passing the collected user data to the system. (if you're worried
about someone intercepting stuff as it wings it's way through the ether you
can (account allowing) run and process the transaction using a secure
server  ( web address starts https://www. instead of http://www.your.edu  )
ensuring the entire deal is encrypted by the server, and neatly
sidestepping a crash course on crypto techniques)

It's incredibly simple to implement and adding or deleting users is simply
a case of adding or removing data from the '.htaccess' file, which can be
done manually or through a CGI.

for more info on exactly how to implement the perl part look through the
PODs accompanying the LWP module (more precisely LWP::Authen::Basic)

HTH
Robin

Reply via email to