Users and Passwords

Oxymoron · Dec 19, 2000

Hi, I have made HTML sites, and basic forms to be interpretted and processed by the CGI server. I was just wondering if I could upload a file to the CGI (a list of users, and their corresponding passwords) so that instead of having a VB Script input box, which is blatant to all on the who can just view source. I can pass the value a user inputs in a 'log in' form, to check it against a file on the server. As I only have limited funds, and cannot afford to run my own sever, and own SQL. So if anyone has a clue, I'd be most grateful.
Thanx very much
JOE
joewardell@hotmail.com

tanderso · Dec 19, 2000

Yes you can.

If you want a more specific answer, ask a more specific question.
Sincerely,

Tom Anderson
CEO, Order amid Chaos, Inc.

http://www.oac-design.com

Oxymoron · Dec 19, 2000

ok.....how!
I have a list of users and their passwords, but I'm not sure of the Server's CGI capabilities, how would I load a program that could check the users, and their password's.
As I have no clue about CGI whatsoever. Does anyone have a code that would do this.
Thanx
JOE

goBoating · Dec 20, 2000

Good Morning Oxymoron,
I think you may be in over you head here..... The 'let me find some code and drop it on a server' approach can be dangerous. I humbly suggest that the only time you should do that is when you can read and make sense of the code and are also aware of the security and performance issues that may exist. A few questions.....

?Do you write any Perl?
?What kind of time line are you on?

>ok.......how!
a not as concise answer as you would like........
About CGI...... CGI is simply a set of rules that defines how to talk to a web server and get it to run a program for you. The code can do anything you want to write it to do. As long as you obey the rules, you can write your code in any language. The subject is to wide and deep to address reasonably via this medium. There are many tutorials on the web to learn some basic Perl and to learn how to use Perl to do CGI. There is a good start at

http://www.perl.com/pub/2000/10/begperl1.html.

Additionally, Dr. Lincoln Stein has a good security faq at

http://www.w3.org/Security/Faq/www-security-faq.html.

Once you get a handle on Perl and CGI, your problem is pretty straight forward, if not trivial. If this is to much to do, then I suggest you need to get some professional support, or, if this is an assignment, you better get to work.

Good Luck....
Let us know as you run into bumps, and we'll answer any specific questions that you have.

keep the rudder amid ship and beware the odd typo

goBoating · Dec 20, 2000

another link

http://www.cgi101.com/class/

keep the rudder amid ship and beware the odd typo

tanderso · Dec 20, 2000

Read some tutorials, go to school, or hire a real web developer.

I'm not going to write a program for you.
Sincerely,

Tom Anderson
CEO, Order amid Chaos, Inc.

http://www.oac-design.com

Oxymoron · Dec 21, 2000

Hi
I know I don't have a clue about CGI, I was just intrested as to it's capabilities, I don't want anyone to rite a program for me, I just wanted to learn.
Thanx for all your help.
JOE

vcherubini · Jan 1, 2001

Here is a short script that I wrote a while back. Just change the data accordingly. It reads from a flat text file that looks something like this:

user1,password1
user2,password2
user3,password3

Save it as data.txt. The txt file must also be comma delimited.

Here is the script. I think that it is pretty self explanatory.

[tt]

#!usr/bin/perl

# location of the txt file
$datadir = "e:\\nameofyourserver\\yoursite.com\\

http://www\\vic\\";

# collect the data from the user using Post

read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
($name, $value) = split(/=/, $pair);
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$FORM{$name} = $value;
}

if ($FORM{'action'} eq "checkpassword&quot

{ &checkpassword; }
else { &default; }

sub default {
print "Content-type: text/html\n\n";
print "<html>\n<head>\n<title>Enter your user name and Password</title>\n</head>\n";
print "<body>\n";
print "<form method=\"post\">\n";
print "<input type=\"hidden\" value=\"checkpassword\" name=\"action\">\n";
print "<font face=\"verdana\" size=\"-2\" color=\"black\"><b>username:</b></font>\n";
print "<br><input type=\"text\" name=\"user\" style=\"background:00648E; color:white; height:20; font-size:10px;\"><br>\n";
print "<font face=verdana size=-2 color=black><b>password:</b></font>\n";
print "<br><input type=\"password\" name=\"password\" style=\"background:00648E; color:white; height:20; font-size:10px;\"><br>\n";
print "<input type=\"submit\" value=\"Enter\" style=\"background:black; color:white; height:20; font-size:10px;\">\n";
print "<input type=\"Reset\" value=\"Clear\" style=\"background:black; color:white; height:20; font-size:10px;\">\n";
print "</form>\n";
print "</body>\n</html>\n";
}

sub checkpassword {
open(FILE, "$datadir/data.txt&quot

|| die("File does not reside on server: $!&quot

;
while (<FILE>) {

@data = split(/\n/);
foreach $entry (@data) {
($user, $password) = split(/,/, $entry);
if ($FORM{'user'} eq "$user&quot

{
$userverified = "1";
}
if ($FORM{'password'} eq "$password&quot

{
$passwordverified = "1";
}
}
}
close(FILE);

if ($userverified && $passwordverified) {
&accessgranted;
} elsif ($userverified) {
&badpassword;
} else {
&baduserpass;
}
}

sub accessgranted {
print "content-type: text/html\n\n";
print "<html><head><title>access granted</title></head>\n";
print "<body>\n";
print "<h1>access granted</h1>\n";
print "welcome to the

http://wwwboard

by me, vic cherubini.\n";
print "<br>select what you want to do.\n";
print "</body>\n";
print "</html>\n";

}

sub badpassword {
print "content-type: text/html\n\n";
print "<html><head><title>bad password</title></head>\n";
print "<body>\n";
print "<h1>bad password</h1>\n";
print "</body>\n";
print "</html>\n";

}

sub baduserpass {
print "content-type: text/html\n\n";
print "<html><head><title>bad username and password</title></head>\n";
print "<body>\n";
print "<h1>bad username and password</h1>\n";
print "</body>\n";
print "</html>\n";

}

[/tt]

If you need more help, don't hesitate to ask.

-Vic

vic cherubini
malice365@hotmail.com

http://www.epicsoftware.com

====

Knows: Perl, HTML, JavScript, C/C++, PHP, Flash, Director

Wants to Know: Java, Cold Fusion, Tcl/TK

====

goBoating · Jan 2, 2001

good effort vik, you should be commended. You were willing to invest more than I. Good try. I hope Oxymoron got what he/she needed.

keep the rudder amid ship and beware the odd typo

Oxymoron · Jan 2, 2001

Hi again
wow, thanx vik.
All I wanted to know was if it was possible.
But thanx everyone for the help.
I've started to learn Pearl, and so understood some of Vik's code. I shan't use it till I can understand it, and appreciate it, and will give a link to any site he/she may own.
Thanx once again
JOE

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Users and Passwords

Oxymoron

Technical User

tanderso

IS-IT--Management

Oxymoron

Technical User

goBoating

Programmer

goBoating

Programmer

tanderso

IS-IT--Management

Oxymoron

Technical User

vcherubini

Programmer

goBoating

Programmer

Oxymoron

Technical User

Similar threads

Part and Inventory Search

Sponsor