[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: The objects...



On Sun, 31 Oct 1999, Jason Pincin wrote:

> Well - we still want to look into replacing mod_perl with PHP
> authentication - I think this discussion thread is a good place to
> discuiss that.  Anyone have any thoughts on the matter?  If we decide on

The other thing is my Search.pm interface to ht://dig.  We'll have to
re-write that in PHP.  The other option is to have a set of dedicated
mod_perl httpd process which only run search.pm.  We'd only need as many
mod_perl httpd's running as simultaneous searches going on (5-10 should be
enough).  This would be an excellent short term solution.

> crypt (which I think is fine... but md5() would be cool too, and that
> would not limit password sizes as strictly right?

I don't see any reason to use MD5.  Do you really think people are going
to use passwords larger than 8 characters?  Let's face it, we're not
trying to secure nuclear launch codes here.

> Anyway - can we develop php authentication if we go this route? I haven't
> looked into it yet - I'm wondering if anyone else has previous experience
> in this arena.

This is going to have to be very optimized.  Each and every request will
go through this code.

--
Aaron Turner, Core Developer       http://vodka.linuxkb.org/~aturner/
Linux Knowledge Base Organization  http://linuxkb.org/
Because world domination requires quality open documentation.