REMOTE_USER set apo CGI script

Nikos Mavroyanopoulos nmav at hellug.gr
Sat Sep 2 20:29:02 EEST 2000


Filippos Slavik wrote:

> Yparxoun merikoi tropoi. Omws tha eprepe prin na anoiksoume tetoia
> koubenta na:
> 
> [1] Orisoume ti akribws ennouwme URL Rewritting - 'h mallon me poio
> tropo to xrisimopoioume kai gia poio logo to xrisimopoihoume.
[...]

> Twra sxetika me ton [1] kapoios filos tis listas, egrapse:
> "Oxi, alla xreiasthke na steilw se synergath to URL enos keimenou pou
> briskotan se enan closed-user-group-server kai htan ths morfhs
> http://xxx.xxx.xxx/KDGHEI56345LMGNDDDO745325.doc

> To mono pou exw na pw einai pws to parapanw URL-paradeigma den exei
> kamia apolytos sxesh me URL Rewritting gia session tracking.
> Kai gia na teleiwnw, parapempw sto poly kalo biblio tou Jason Hunter
> "Java Servlet Programming", selida 200 :-)

To session tracking mporei na ginei me pollous tropous giati to
periorizeis ston parapanw tropo?
O tropos tou styl:
http://xxx.xxx.xxx/AJFSIAJ35908/index.html

xrisimopoieitai otan kapoios exei prosvasi ston server, opote kai
elegxei ta sessions apo ekei (px enas web server enswmatwmenos se mia 
efarmogi).
O tropos pou perigrafeis einai ena hack gia tis periptwseis pou den
yparxei epikoinwnia me ton web server, apo tin web efarmogi.

Kai pali omws yparxei to problima tou session hijacking, idiaitera otan
oi random number generators einai oi srand() kai rand().


> Filika
> Filippos Slavik

> ################################################################
> Filippos Slavik
> Forthnet R&D, Hrakleio, Greece
> e-mail : fsla at forthnet.gr
> phone : (+3) 081 391230
> ################################################################



-- 
Nikos Mavroyanopoulos
mailto:nmav at hellug.gr


--
linux-greek-users mailing list -- http://lists.hellug.gr




More information about the Linux-greek-users mailing list