[Re: [lug] Web scripts?]

Justin glowecon at netscape.net
Wed Nov 29 07:04:51 MST 2000


I already have SSL on my webserver, I use it with my webmail. I was planning
on using SSL with whatever form I end up using. I'll check out the link,
thanks.

Justin

Tkil <tkil at scrye.com> wrote:
> >>>>> "Justin" == Justin  <glowecon at netscape.net> writes:
> 
> Justin> I am wondering what I would need in order to make a form or
> Justin> something that a user can access via the web and change their
> Justin> email/shell password.
> 
>    http://dmoz.org/Computers/Programming/Internet/CGI/Tutorials/
> 
> also, you're dealing with very sensitive data here; sending passwords
> over naive forms means plaintext.  so you also need to look at using
> ssl with your web server.
> 
> not to be too rude, but it sounds like you need to read a lot more
> background material, build some non-sensitive (e.g. read-only!) cgi
> scripts, read Bruce Schneier's _Applied Cryptography_ 2nd ed [and all
> the cryptograms for the last year, and the LWN CGI vulnerability
> updates, etc].
> 
> at that point, you might start looking at writing this script
> yourself.
> 
> t.
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug


____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at http://home.netscape.com/webmail




More information about the LUG mailing list