CGI/Perl Guide | Learning Center | Forums | Advertise | Login
Site Search: in

  Main Index MAIN
INDEX
Search Posts SEARCH
POSTS
Who's Online WHO'S
ONLINE
Log in LOG
IN

Home: Perl Programming Help: Beginner:
ENV varible passing

 



ypwong
Deleted

Jan 13, 2000, 2:44 AM

Post #1 of 2 (1027 views)
ENV varible passing Can't Post

I have seen that some script uses hidden env variable passing.
[ex]
after you login the address bar on top reads: www.fool.com/run.pl?passwd
where my real password is hidden and not shown, I was wondering how do you do that. only the varible name passwd is shown. I have try to look up tutorial on web but they don't help much. if it is possible could you write a simple working script for me that just do that.


Jasmine
Administrator / Moderator

Jan 13, 2000, 3:50 AM

Post #2 of 2 (1027 views)
Re: ENV varible passing [In reply to] Can't Post

Does it always read www.fool.com/run.pl?passwd, or does the passwd change (not to your password, I understand)? Perhaps to a sequence of numbers? If so, then they are using the contents of the QUERY_STRING environment variable ($ENV{'QUERY_STRING'}) to pass along a session id. That is, once you log in, you are assigned a unique id. From that point on, all links available to you within the program contain this unique id, which is tied back to your login in a database on the server.

The other possibility is that they are using Perl modules to maintain stateless sessions. Two modules that look like they do this are:

CGI::Persistent -- Transparent state persistence for CGI applications.
CGI::EncryptForm - Implement trusted stateful CGI Form Data using cryptography.

Hope this helps!

 
 


Search for (options) Powered by Gossamer Forum v.1.2.0

Web Applications & Managed Hosting Powered by Gossamer Threads
Visit our Mailing List Archives