[cgiapp] Re: Perl CGI authentication and session management

[Mark Stosberg <suppressed>]

On 2003-10-15, David Christensen <suppressed> wrote:
> hello, world!
>
> I'm working on an e-commerce site using Apache 1.3.26, Perl 5.6,
> CGI::Application, HTML::Template, and CGI::FormBuilder.  I need to
> provide secure user login/logout, profiles, financial pages, etc..  For
> starters, I plan to use https for sensitive pages.  After that, I'm not
> sure which way to go.  I would prefer using a standard CPAN module, such
> as CGI::Session and/or CGI::Session::Auth.
>
> What experiences, recommendations, comments, criticisms, and/or
> suggestions do the list readers have in the areas of user authentication
> and session management using Perl and CGI?  Does anyone have URL's for
> some good articles, tutorials, etc.?

Some users on this list contributed to this related Wiki page:

http://twiki.med.yale.edu/twiki2/bin/view/CGIapp/SessionsWithCgiApp

CGI::Session is what I'm beginning to use myself. The only thing
I didn't like was the way it stored the data in Postgres. 
I wrote CGI::Session::PureSQL to fix this, but it hasn't been formally
released yet.

My understanding of CGI::Session::Auth is that extends the functionalty
of CGI::Session with a few extra functions. Next time I need
CGI::Session, I plan to look at ::Auth as well. 

I also recommend looking into Data::FormValidator as an alternative to
the validation of CGI:::FormBuilder (it does validation, too, right?).
D::FV seems to be a popular choice with the CGI::App users here. But
don't ask me, I'm biased. :)

	Mark
 
--
 . . . . . . . . . . . . . . . . . . . . . . . . . . . 
   Mark Stosberg            Principal Developer  
   suppressed     Summersault, LLC     
   765-939-9301 ext 202     database driven websites
 . . . . . http://www.summersault.com/ . . . . . . . .


---------------------------------------------------------------------
Web Archive:  http://www.mail-archive.com/suppressed/
              http://marc.theaimsgroup.com/?l=cgiapp&r=1&w=2
To unsubscribe, e-mail: suppressed
For additional commands, e-mail: suppressed