#perl - Sat 28 Apr 2007 between 00:00 and 00:55

NY Lost Funds



ginkeqjust the name of a state file
jagermanA per-user state file?
ginkeqi think im just gonna say something like, "click here to proceed" and leave it hidden
ya
lupin_sanseiYou need to think about what happens if a naughty user looks at the source of your HTML, and changes the values of the hidden fields
jagermanWell, quite common in that case is to generate some sort of ID (maybe a long random string) which is the filename in some directory
lupin_sanseiVery easy to do in FF. There's a toolbar that lets you view the hidden fields as text fields, and change their values by typing over them.
jagermanBut *don't* use sequential numbering
lupin_sanseiWhy don't you use CGI::Session? It's not bad
jagermanlupin_sansei: It's an assignment :)
lupin_sanseiAssuming they don't let you use that then use a hash, or a random ID like jagerman said
jagermanlupin_sansei: Well, he has to write two separate programs; one to handle the login, then another to do everything else.
ginkeqya the state file is like 40 characters
lupin_sanseijagerman: I have a login script somewhere that uses the random ID technique. When a user logs in I assign them a random unique ID and put it in their cookie, plus a record in my database. Then as they move around my site I can store state data about them in my database. But nothing is revealed on the client side.
whoops I mean ginkeq
simcop2387hmm
actionsimcop2387 readies his op powers
simcop2387readies his op powers
actionCPAN upload: Net-Pavatar-1.01 by KARJALA
CPANupload: Net-Pavatar-1.01 by KARJALA
simcop2387just in case
lupin_sanseiSomeone should make a "web design patterns" book or site describing these web building blocks so people don't need to keep reinventing the wheel all the time
Chris62vwGumbyBRAIN, donkey kong
GumbyBRAINLike maybe your doctor about chemical castration. Has anyone even use the radio yesterday and was like, "no!" and got king kong had been screaming.
simcop2387GumbyBRAIN: SHAM-PAG-KNEE
GumbyBRAINYou know, i knew nothing of .net remoting some month or two above the knee?
Jmax-GumbyBRAIN: donkey dong
GumbyBRAINDong dong dong.
cfeddeGumbyBRAIN: GumbyBrain
GumbyBRAINelisbeth is tired of my projects have the opportunity to change the thing is, gets to results page 35, gives up.
majikmanhow do i match the string ",\nCONSTRAINT"?
mauke/,\nCONSTRAINT/
Jmax-heh!
avar's gone too?
so, avar, randal, and somian
majikmanhmm... i must be doing something wrong
buuJmax-: Where the hell is avar?
Jmax-not here!
analhello
t35t0rbelkin got messed up
class action lawsuit did everyone get an email?
Jmax-no, i didn't

Page: 2 9 16 23 30 37 44 51 58 65 

IrcArchive

NY Lost Funds