bj,
on my side I just check the ip address of the host which must match.
yes somebody can change the ip address to match the ones with the access,
but the network is not going to like that.
load-balancing but i'm not sure.
Pierre
>From: "Joe Schulman" <[EMAIL PROTECTED]>
>To: "Beginners-Cgi" <[EMAIL PROTECTED]>
>Subject: Usernames and Passwords
>Date: Wed, 6 Jun 2001 15:56:55 -0500
>
>Hey~
>This is mainly a question directed to those with experience in this sort of
>thing.
>
>In general, how should one go about authenticating a user and then allowing
>them to view separate pages under that particular login?
>
>I know that cookies aren't 100% reliable, and I also know that sending
>secret and often vital information like that over open,
>non-encrypted streams is not the best way to go.
>
>Encryption, sadly, is not an option for this particular case.
>
>Could anyone please help me in this matter?
>
>TIA,
>Joe
>
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
