One step at a time.

Your first problem is user authentication?

A few options:

1.  Directory access (as you mentioned in your message)
  The user must be authenticated to run the scripts / view the web pages 
2.  DBMS built-in security
  Not supported (properly) by MS-Access but can easily be setup with mysql,
postgresql, sybase, etc
  Get username and password via web-form, open connection to database.  Main
problem with this is that user needs to authenticate on each database
request.  To avoid this need to store session state (username and password and
use cookies) or maintain open connection (perhaps via mod-perl or asp).
3.  Create a "users" table within the database, storing username => password
digest pairs (and perhaps last logon, current session id, etc).  All users
connect to DB under same dummy DBMS account (ignore this for Access).  User
supplies username and password on web login page.  User's credentials are
checked against 'users' table and on sucess a unique session cookie is sent
back to the browser.  In this way the user remains authenticated for the
lifetime of the cookie.

Looks like you'll have to use method 3 (based on your previous message).

Investor wrote:
> 
> HI all,
> 
> I would be extremely appreciative with solution
> suggestions to the problem I am having.
> 
> I really could use some help right now !!
> 
> I am trying to get a database driven website up and
> running that has some amount of security on it (which
> i intend to make progresively better).  It needs
> user/pwd access to a database of info, after a
> subscription fee is paid.
> 
> Currently I am having trouble setting up the basic
> structure.
> 
> By the way this is a starup company, and only 5- 10
> subscriptions would fund much better software /
> hardware / server for the site.  So my goal is to set
> up something inexpensive to get those 5 or so
> subscriptions.
> 
> Attempt No. 1:
> I setup a test site ( virtual hosting I think it is
> called) that utilizes perl & ms access.  It works oK
> except I didn't get the user/pwd thing working. It has
> pwd protected directories - however they told me
> queries will not work with the pwd protected directory
> insalled.  Technical support is very slow in
> responding.  And I didn't figure out how to provide
> the needed security mentioned above.
> 
> Currently I have been reading about mysql and just
> installed it on windows 98.  I am open to changing
> over to linux based systems.  However I would like to
> create the tempory site to get a few subsciptions
> prior to forking out the funds.
> 
> So finally now that you guys know my situation can you
> please make some suggestions as to how to get the
> temporary site up ( to get 5 subscriptions or so) and
> I think I coudl painfully, over time, work on a site
> that could handle much more.
> 
> Information:
> The database would be text only, less than 1 GB !
> Right now I think it is at 5 MB but will increase.  I
> am familar with perl 5.6 and ms access.
> Budget:  Shoe string budget for now.....
> 
> :)
> I would greatly appreciate assistance....
> I am sure many of you dealt with this type of
> situation before.
> 
> =====
> Regards,
> 
> Investorclb
> 
> __________________________________________________
> Do You Yahoo!?
> Send FREE video emails in Yahoo! Mail!
> http://promo.yahoo.com/videomail/
> _______________________________________________
> Perl-Win32-Users mailing list
> [EMAIL PROTECTED]
> http://listserv.ActiveState.com/mailman/listinfo/perl-win32-users

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to