Ok, looking at all the posts I need to spell all of it out. I am using
the database through the backend to prevend any passwords from being
transmited and possibally cached in a browser. Here is how it works:
Our user, lets call him John, loggs into our portal. This is a microsoft
environment (www.asksimon.com). He authenticates on an MS server. At
that time, the microsoft server generates a random key with a time stamp,
which is | delineated, adds the user name and base64 encodes it. Then all
links for the user to check his e-mail are writen as:
<a href="http://twig.asksimon.org/auth?k=b64_encoded_sequence">email</a>
When I get the request my handler, which is triggered to fly when
/auth is requested, looks at the key, queries the MsSql database and
checks the random key and time stamp. If all checks out, the request is
rewriten into a post like so:
twig.asksimon.org/index.php3 [log_name => "name" log_passwd => "passwd"].
I get the passwd from the .org server thereby keeping any passwords from
being transmitted between the microsoft environment and the linux
environment.
I need to use the post, because that is what php3 is expecting. If
anybody can think of any better way I would like to hear it. If not, then
is it possible to translate a GET uri into a POST uri with a
PerlTransHandler (or any other handler for that matter)??
I would like to use pnotes (that would have been easy) but I am going
from mod_perl to mod_php thereby nullifyiing all of the mod_perl gadgets.
Thanks
David
