Re: PHP and user login stuff

["Aaron D. Turner" <aturner@pobox.com>]

-----BEGIN PGP SIGNED MESSAGE-----


On Wed, 17 Feb 1999, Jason Pincin wrote:

> > OTOH, isn't that true with other methods as well?  Isn't SSL the only
> > way to guarantee it can't be sniffed?
> 
> Agreed.  Within the URL just scares me I guess... right there, plainly
> visable... unless ya use POST.  Matter of preference I guess.  

You encrypt the password on a session by session basis which is easy to
do.  Or keep reading...
 
> > OK, I guess I'll go with that.
> 
> That was my thought anyway.  Thats what I'm doing with the article pages
> for now, then I'll go back and impliment the cookie checking later.
> 
> If you come up with ideas you'd rather persue let me know and I'll loko at
> implimenting them on my end as well.
> 
> BTW, I'm talking about the staticly generated code aaron... not the actual
> article tools your working on.

We'll let's think about that for a second.  All the articles being
displayed are being done so via a pre-processor.  That makes them dynamic.
That means about 80-99% of the site content will be dynamic.  So all that
is left is the main navigation pages.  I don't see any reason why we can't
use a very simular pre-processor engine for those.  We've already agreed
that the pre-processor only increases load by a minor bit.

Also there is an additional benifit of dynamic navigation pages.  Check
out www.gimp.org, and their navigation bar.  Now obviously we wouldn't
want to do a graphical version of this.  There is however in the latest
Perl Journal all the code we need to do a text version using mod_perl.
Since we're talking about very deep and wide organization of information,
something like this will make it navigatable, and less HTML code writing
for us overall.

Well gotta jam to work...


- -- 
Aaron Turner           | Either which way, one half dozen or another. 
aturner@pobox.com      | Check out the Red Hat Linux User's FAQ Online!
www.pobox.com/~aturner | http://www.pobox.com/~aturner/RedHat-FAQ/
All emails from this account are PGP signed.  Lack of a signature is "bad".
PGP Key fingerprint = FB E1 CE ED 57 E4 AB 80  59 6E 60 BF 45 1B 20 E8



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNsxE1TM3jpXy1kJtAQHYwgP7BbxyS23nq0x2+PNbbFSyYiLJ5MGLD11t
p/t5gz2iaGITxVOoJKXUNUGhgIt9t3qgeYrbIC6xM0j4JdGE2x/Evs7b1s2cFhWt
r2MjwxMhP3v1LisI6ExNvO+NO0cj+gV0gAGLVz20ErL3hUjQLxDSsyXeWA6K6J2s
v9z1w4mlg3U=
=Pa62
-----END PGP SIGNATURE-----