Re: Secure Form Submission

[zentara]

On Fri, 22 Aug 2003 20:10:37 +, [EMAIL PROTECTED]
(Greenhalgh David) wrote:


Thanks for that. The MD5 is a one way hash, unfortunately. I need to be 
able to decrypt at the server side.

I agree about SSL, unfortunately my client's host (borrowed space on a 
non-commercial server) only has 2 IPs for SSL and both are filled until 
the system upgrade late this year. What I am looking for is a fill in 
solution that will allow  some form of secure transmission of personal 
information (not a password) until the SSL becomes available.

Well you could always use Perl scripts, and setup some socket
connections. You could just ask the client to download a small
script and run it, which do a safe transfer.
It could be done alot of ways. The downloaded perl script could be
run to encrypt a file with rc4, then the client could upload the
results.  The MD5 password method would give you a way to
exchange an initial password safely, then that password could be used
by both sides for the rc4 password.






-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Counter triggered on download

[fliptop]

On Wed, 20 Aug 2003 at 13:29, Merrill Oakes opined:

MO:I have a link to a PDF file on a web page.  I want to count how many 
MO:times that someone clicks on the link (i.e. downloads the PDF).  The 
MO:easy way (at least for me) would be to make them go to a download page 
MO:first, and I could put a counter in the page, BUT this requires an extra 
MO:step for the user.
MO:
MO:SO, is there any way to:#1. monitor how many a times a file has been 
MO:downloaded, or maybe #2. have them click on a link (that is really a cgi 
MO:script, that then increments the counter then starts the download/open 
MO:of the PDF?  Of course this last method will disable the ability to do a 
MO:shift-click to download the doc.

merrill - i'm a little late on this thread, and the other suggestions are
valid, but here's one way to serve up files w/o using a direct link by
taking advantage of CGI.pm's header() function:

my $cgi = new CGI;

print $cgi-header('application/pdf');

open OUT, '/path/to/some/pdf/file';
my $buffer;

while (my $read = read(OUT, $buffer, 4096)) {
  print $buffer;
}

close OUT;

# insert code here to increment the counter


-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]