Re: [PHP] Passing variables between servers

2002-08-21 Thread Mark McCulligh

I have read this arcticle too, and yes it will work for PHP to ASP but I
have never came across a ASP version like this function to send the
information from ASP to PHP.
_
Mark McCulligh, Application Developer / Analyst
Sykes Canada Corporation www.SykesCanada.com
[EMAIL PROTECTED]
- Original Message -
From: "Jay Blanchard" <[EMAIL PROTECTED]>
To: "'Mark McCulligh'" <[EMAIL PROTECTED]>; "'Adam Williams'"
<[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, August 21, 2002 1:40 PM
Subject: RE: [PHP] Passing variables between servers


> [snip]
> I thought about encrypting the whole querystring then decrypting it on the
> other server, but I wanted to keep the address bar clean.  I wanted the
user
> not to know they just got passed.  If all a sudden there was a lot of data
> in the address bar they will wonder what it is for.
> [/snip]
>
> How about POSTING the whole querystring...
>
> http://www.faqts.com/knowledge_base/view.phtml/aid/12039/fid/51
>
> posting without using a form, can probably be re-engineered to for ASP to
> send information back
>
> HTH!
>
> Jay
>
> ***
> * Texas PHP Developers Conf  Spring 2003  *
> * T Bar M Resort & Conference Center  *
> * New Braunfels, Texas*
> * San Antonio Area PHP Developers Group   *
> * Interested? Contact [EMAIL PROTECTED] *
> ***
>
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Passing variables between servers

2002-08-21 Thread Seairth Jacobs

MD5 is a one-way hash.  There is no way to get information back out of it.
If he keeps a copy of the hash locally to comare instead of the original
password, this is still as vulnerable as using the original password in this
case.  The only thing it would protect from is making available the original
password (which may be used by the user for other sites, applications, etc).

---
Seairth Jacobs
[EMAIL PROTECTED]


"Adam Williams" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Just suggestion but why not use md5($password) and then send the result of
> that in your GET?
>
> Adam
>
> On Wed, 21 Aug 2002, Mark McCulligh wrote:
>
> > I have two server.  One running PHP/Linux the other running ASP/2000.
> > The user logins into the PHP server and session variables are made to
hold
> > their username, password, department, etc..  The site from time to time
> > redirect the user to the ASP server.  I want to pass the session
variable
> > across to the other server.  I can't use the GET method.
> > (www.domain.com/form.asp?username=Mark.) because putting the
password on
> > the address bar is not an option.  The ASP server will redirect them
back
> > when they are done on it. It will pass back the variables just in case
the
> > session on the PHP server has expired for the PHP server can create a
new
> > session if needed.
> >
> > I don't want to use a cookie.
> >
> > I was thinking of using cURL but I can't fine any information about
using it
> > in ASP.  I know how to use cURL in PHP to redirect the user to the ASP
> > server and pass the variables in the POST method, but not the other way.
> >
> > Any ideas would be a GREAT help.
> > Mark.
> >
> > _
> > Mark McCulligh, Application Developer / Analyst
> > Sykes Canada Corporation www.SykesCanada.com
> > [EMAIL PROTECTED]
> >
> >
> >
> >
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




RE: [PHP] Passing variables between servers

2002-08-21 Thread Jay Blanchard

[snip]
I thought about encrypting the whole querystring then decrypting it on the
other server, but I wanted to keep the address bar clean.  I wanted the user
not to know they just got passed.  If all a sudden there was a lot of data
in the address bar they will wonder what it is for.
[/snip]

How about POSTING the whole querystring...

http://www.faqts.com/knowledge_base/view.phtml/aid/12039/fid/51

posting without using a form, can probably be re-engineered to for ASP to
send information back

HTH!

Jay

***
* Texas PHP Developers Conf  Spring 2003  *
* T Bar M Resort & Conference Center  *
* New Braunfels, Texas*
* San Antonio Area PHP Developers Group   *
* Interested? Contact [EMAIL PROTECTED] *
***



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




RE: [PHP] Passing variables between servers

2002-08-21 Thread Daniel Masson


Hi !!

I know you said you cont want to use cookies ... I suggest that place
encrypted data in a cookie and in the win2000 machine place a php script
that read the data in the cookie, uncryptit and some how set the info
for the asp script, a plain text file or something ...

I hope this is useful.



-Mensaje original-
De: Mark McCulligh [mailto:[EMAIL PROTECTED]] 
Enviado el: miƩrcoles, 21 de agosto de 2002 12:23
Para: [EMAIL PROTECTED]
Asunto: [PHP] Passing variables between servers


I have two server.  One running PHP/Linux the other running ASP/2000.
The user logins into the PHP server and session variables are made to
hold their username, password, department, etc..  The site from time to
time redirect the user to the ASP server.  I want to pass the session
variable across to the other server.  I can't use the GET method.
(www.domain.com/form.asp?username=Mark.) because putting the
password on the address bar is not an option.  The ASP server will
redirect them back when they are done on it. It will pass back the
variables just in case the session on the PHP server has expired for the
PHP server can create a new session if needed.

I don't want to use a cookie.

I was thinking of using cURL but I can't fine any information about
using it in ASP.  I know how to use cURL in PHP to redirect the user to
the ASP server and pass the variables in the POST method, but not the
other way.

Any ideas would be a GREAT help.
Mark.

_
Mark McCulligh, Application Developer / Analyst
Sykes Canada Corporation www.SykesCanada.com [EMAIL PROTECTED]



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Passing variables between servers

2002-08-21 Thread Mark McCulligh

I thought about encrypting the whole querystring then decrypting it on the
other server, but I wanted to keep the address bar clean.  I wanted the user
not to know they just got passed.  If all a sudden there was a lot of data
in the address bar they will wonder what it is for.

Mark.
_
Mark McCulligh, Application Developer / Analyst
Sykes Canada Corporation www.SykesCanada.com
(888)225-6824 ex. 3262
[EMAIL PROTECTED]
- Original Message -
From: "Adam Williams" <[EMAIL PROTECTED]>
To: "Mark McCulligh" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, August 21, 2002 1:30 PM
Subject: Re: [PHP] Passing variables between servers


> Just suggestion but why not use md5($password) and then send the result of
> that in your GET?
>
> Adam
>
> On Wed, 21 Aug 2002, Mark McCulligh wrote:
>
> > I have two server.  One running PHP/Linux the other running ASP/2000.
> > The user logins into the PHP server and session variables are made to
hold
> > their username, password, department, etc..  The site from time to time
> > redirect the user to the ASP server.  I want to pass the session
variable
> > across to the other server.  I can't use the GET method.
> > (www.domain.com/form.asp?username=Mark.) because putting the
password on
> > the address bar is not an option.  The ASP server will redirect them
back
> > when they are done on it. It will pass back the variables just in case
the
> > session on the PHP server has expired for the PHP server can create a
new
> > session if needed.
> >
> > I don't want to use a cookie.
> >
> > I was thinking of using cURL but I can't fine any information about
using it
> > in ASP.  I know how to use cURL in PHP to redirect the user to the ASP
> > server and pass the variables in the POST method, but not the other way.
> >
> > Any ideas would be a GREAT help.
> > Mark.
> >
> > _
> > Mark McCulligh, Application Developer / Analyst
> > Sykes Canada Corporation www.SykesCanada.com
> > [EMAIL PROTECTED]
> >
> >
> >
> >
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




Re: [PHP] Passing variables between servers

2002-08-21 Thread Adam Williams

Just suggestion but why not use md5($password) and then send the result of
that in your GET?

Adam

On Wed, 21 Aug 2002, Mark McCulligh wrote:

> I have two server.  One running PHP/Linux the other running ASP/2000.
> The user logins into the PHP server and session variables are made to hold
> their username, password, department, etc..  The site from time to time
> redirect the user to the ASP server.  I want to pass the session variable
> across to the other server.  I can't use the GET method.
> (www.domain.com/form.asp?username=Mark.) because putting the password on
> the address bar is not an option.  The ASP server will redirect them back
> when they are done on it. It will pass back the variables just in case the
> session on the PHP server has expired for the PHP server can create a new
> session if needed.
>
> I don't want to use a cookie.
>
> I was thinking of using cURL but I can't fine any information about using it
> in ASP.  I know how to use cURL in PHP to redirect the user to the ASP
> server and pass the variables in the POST method, but not the other way.
>
> Any ideas would be a GREAT help.
> Mark.
>
> _
> Mark McCulligh, Application Developer / Analyst
> Sykes Canada Corporation www.SykesCanada.com
> [EMAIL PROTECTED]
>
>
>
>


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php