[Re: [lug] Web scripts?]
Justin
glowecon at netscape.net
Wed Nov 29 07:04:51 MST 2000
I already have SSL on my webserver, I use it with my webmail. I was planning
on using SSL with whatever form I end up using. I'll check out the link,
thanks.
Justin
Tkil <tkil at scrye.com> wrote:
> >>>>> "Justin" == Justin <glowecon at netscape.net> writes:
>
> Justin> I am wondering what I would need in order to make a form or
> Justin> something that a user can access via the web and change their
> Justin> email/shell password.
>
> http://dmoz.org/Computers/Programming/Internet/CGI/Tutorials/
>
> also, you're dealing with very sensitive data here; sending passwords
> over naive forms means plaintext. so you also need to look at using
> ssl with your web server.
>
> not to be too rude, but it sounds like you need to read a lot more
> background material, build some non-sensitive (e.g. read-only!) cgi
> scripts, read Bruce Schneier's _Applied Cryptography_ 2nd ed [and all
> the cryptograms for the last year, and the LWN CGI vulnerability
> updates, etc].
>
> at that point, you might start looking at writing this script
> yourself.
>
> t.
>
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at http://home.netscape.com/webmail
More information about the LUG
mailing list