Perl Guru Forums: Perl Programming Help: Intermediate: Encrypt Password in Navigation Bar

CGI/Perl Guide | Learning Center | Forums | Advertise | Login

Site Search: in


	MAIN INDEX	SEARCH POSTS	WHO'S ONLINE	LOG IN

Home: Perl Programming Help: Intermediate:
Encrypt Password in Navigation Bar

noguru
Deleted

Feb 21, 2000, 5:15 AM

Post #1 of 4 (358 views)

Encrypt Password in Navigation Bar	Can't Post

I have a script which is similar what one uses for web-based e-mail. Here's the problem:

1. The username and password must appear in the navigation bar and in the form elements within each page (to properly update each user account).

2. Letting the unencrypted password appear in the navigation bar is dangerous since it shows up in the referrer logs of other sites, making for easy hack-ins.

3. I need something, maybe a subroutine, that encrypts the password in the navigation bar and form elements so that onlookers and referred sites can't pick it up.

Please help! I've been laboring with this matter for a while.

Jasmine
Administrator

Feb 24, 2000, 11:42 PM

Post #2 of 4 (358 views)

Re: Encrypt Password in Navigation Bar [In reply to]	Can't Post

Well, even if you encrypt the password and username in the address bar, it's still allowing for hacks -- I mean, if the address bar will contain an acceptable "password", even if it's encrypted, then there's nothing stopping it from working again.

The most secure method to pass passwords to the program is via the POST not GET method, which keeps the address bar clean.

noguru
Deleted

Feb 25, 2000, 8:05 AM

Post #3 of 4 (358 views)

Re: Encrypt Password in Navigation Bar [In reply to]	Can't Post

Thanks for the suggestion. Now I need help implementing it. The problem is that the script makes users enter the full URL which includes their username and password. I desperately need to find out how to create a method that allows users to login via a form.

Please help. I'm getting really frustrated.

Jasmine
Administrator

Feb 26, 2000, 2:31 AM

Post #4 of 4 (358 views)

Re: Encrypt Password in Navigation Bar [In reply to]	Can't Post

Look in your script for the <FORM> tag. Change it to <FORM METHOD=POST>. If it says <FORM METHOD=GET>, try changing it to <FORM METHOD=POST> If that doesn't work, you may need to dig deeper into the code.

If the program allows the POST method, this should work.

[This message has been edited by Jasmine (edited 02-26-2000).]

Search for (options)

Web Applications & Managed Hosting Powered by Gossamer Threads
Visit our Mailing List Archives