Re: user / pwd access to db driven website

2002-01-11 Thread Simon Oliver

One step at a time.

Your first problem is user authentication?

A few options:

1.  Directory access (as you mentioned in your message)
  The user must be authenticated to run the scripts / view the web pages 
2.  DBMS built-in security
  Not supported (properly) by MS-Access but can easily be setup with mysql,
postgresql, sybase, etc
  Get username and password via web-form, open connection to database.  Main
problem with this is that user needs to authenticate on each database
request.  To avoid this need to store session state (username and password and
use cookies) or maintain open connection (perhaps via mod-perl or asp).
3.  Create a users table within the database, storing username = password
digest pairs (and perhaps last logon, current session id, etc).  All users
connect to DB under same dummy DBMS account (ignore this for Access).  User
supplies username and password on web login page.  User's credentials are
checked against 'users' table and on sucess a unique session cookie is sent
back to the browser.  In this way the user remains authenticated for the
lifetime of the cookie.

Looks like you'll have to use method 3 (based on your previous message).

Investor wrote:
 
 HI all,
 
 I would be extremely appreciative with solution
 suggestions to the problem I am having.
 
 I really could use some help right now !!
 
 I am trying to get a database driven website up and
 running that has some amount of security on it (which
 i intend to make progresively better).  It needs
 user/pwd access to a database of info, after a
 subscription fee is paid.
 
 Currently I am having trouble setting up the basic
 structure.
 
 By the way this is a starup company, and only 5- 10
 subscriptions would fund much better software /
 hardware / server for the site.  So my goal is to set
 up something inexpensive to get those 5 or so
 subscriptions.
 
 Attempt No. 1:
 I setup a test site ( virtual hosting I think it is
 called) that utilizes perl  ms access.  It works oK
 except I didn't get the user/pwd thing working. It has
 pwd protected directories - however they told me
 queries will not work with the pwd protected directory
 insalled.  Technical support is very slow in
 responding.  And I didn't figure out how to provide
 the needed security mentioned above.
 
 Currently I have been reading about mysql and just
 installed it on windows 98.  I am open to changing
 over to linux based systems.  However I would like to
 create the tempory site to get a few subsciptions
 prior to forking out the funds.
 
 So finally now that you guys know my situation can you
 please make some suggestions as to how to get the
 temporary site up ( to get 5 subscriptions or so) and
 I think I coudl painfully, over time, work on a site
 that could handle much more.
 
 Information:
 The database would be text only, less than 1 GB !
 Right now I think it is at 5 MB but will increase.  I
 am familar with perl 5.6 and ms access.
 Budget:  Shoe string budget for now.
 
 :)
 I would greatly appreciate assistance
 I am sure many of you dealt with this type of
 situation before.
 
 =
 Regards,
 
 Investorclb
 
 __
 Do You Yahoo!?
 Send FREE video emails in Yahoo! Mail!
 http://promo.yahoo.com/videomail/
 ___
 Perl-Win32-Users mailing list
 [EMAIL PROTECTED]
 http://listserv.ActiveState.com/mailman/listinfo/perl-win32-users

-
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/   (the list archive)

To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail [EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php




Re: user / pwd access to db driven website

2002-01-07 Thread Tony Buckley

Why don't you forget about the automated subscription service and use the
phone or email to get the money in.  Once you have your 5-10+ subscriptions
up and running then you can upgrade properly and then get your shopping cart
or whatever.

Presumably you'll also want to use a different userID/password per user and
track what they are doing so you'll need a completely new set of
infrastructure tables and the backend code to maintain them.

Another idea if your technical skills aren't yet upto the job would be to
put the data onto CD and just send that out to the early customers;  the
data doesn't sound that volatile and web delivery may not be the best way.

All the above would also give you a much earlier idea of whether this will
be a success or not.  Very few sites that ask for money for information are
a success and if just five subscribers will bank roll you a new platform
then your prices are clearly not a couple of pence per access.

Good luck,

Tony


- Original Message -
From: Investor [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Sunday, January 06, 2002 5:49 PM
Subject: user / pwd access to db driven website


 HI all,

 I would be extremely appreciative with solution
 suggestions to the problem I am having.

 I really could use some help right now !!

 I am trying to get a database driven website up and
 running that has some amount of security on it (which
 i intend to make progresively better).  It needs
 user/pwd access to a database of info, after a
 subscription fee is paid.

 Currently I am having trouble setting up the basic
 structure.

 By the way this is a starup company, and only 5- 10
 subscriptions would fund much better software /
 hardware / server for the site.  So my goal is to set
 up something inexpensive to get those 5 or so
 subscriptions.

 Attempt No. 1:
 I setup a test site ( virtual hosting I think it is
 called) that utilizes perl  ms access.  It works oK
 except I didn't get the user/pwd thing working. It has
 pwd protected directories - however they told me
 queries will not work with the pwd protected directory
 insalled.  Technical support is very slow in
 responding.  And I didn't figure out how to provide
 the needed security mentioned above.

 Currently I have been reading about mysql and just
 installed it on windows 98.  I am open to changing
 over to linux based systems.  However I would like to
 create the tempory site to get a few subsciptions
 prior to forking out the funds.

 So finally now that you guys know my situation can you
 please make some suggestions as to how to get the
 temporary site up ( to get 5 subscriptions or so) and
 I think I coudl painfully, over time, work on a site
 that could handle much more.

 Information:
 The database would be text only, less than 1 GB !
 Right now I think it is at 5 MB but will increase.  I
 am familar with perl 5.6 and ms access.
 Budget:  Shoe string budget for now.

 :)
 I would greatly appreciate assistance
 I am sure many of you dealt with this type of
 situation before.









 =
 Regards,

 Investorclb

 __
 Do You Yahoo!?
 Send FREE video emails in Yahoo! Mail!
 http://promo.yahoo.com/videomail/

 -
 Please check http://www.mysql.com/Manual_chapter/manual_toc.html; before
 posting. To request this thread, e-mail [EMAIL PROTECTED]

 To unsubscribe, send a message to the address shown in the
 List-Unsubscribe header of this message. If you cannot see it,
 e-mail [EMAIL PROTECTED] instead.




-
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/   (the list archive)

To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail [EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php




user / pwd access to db driven website

2002-01-06 Thread Investor

HI all,

I would be extremely appreciative with solution
suggestions to the problem I am having.

I really could use some help right now !!

I am trying to get a database driven website up and
running that has some amount of security on it (which
i intend to make progresively better).  It needs
user/pwd access to a database of info, after a
subscription fee is paid.

Currently I am having trouble setting up the basic
structure.

By the way this is a starup company, and only 5- 10
subscriptions would fund much better software /
hardware / server for the site.  So my goal is to set
up something inexpensive to get those 5 or so
subscriptions. 

Attempt No. 1:
I setup a test site ( virtual hosting I think it is
called) that utilizes perl  ms access.  It works oK
except I didn't get the user/pwd thing working. It has
pwd protected directories - however they told me
queries will not work with the pwd protected directory
insalled.  Technical support is very slow in
responding.  And I didn't figure out how to provide
the needed security mentioned above.

Currently I have been reading about mysql and just
installed it on windows 98.  I am open to changing
over to linux based systems.  However I would like to
create the tempory site to get a few subsciptions
prior to forking out the funds.

So finally now that you guys know my situation can you
please make some suggestions as to how to get the
temporary site up ( to get 5 subscriptions or so) and
I think I coudl painfully, over time, work on a site
that could handle much more.  

Information:
The database would be text only, less than 1 GB !
Right now I think it is at 5 MB but will increase.  I
am familar with perl 5.6 and ms access.  
Budget:  Shoe string budget for now.

:) 
I would greatly appreciate assistance
I am sure many of you dealt with this type of
situation before.









=
Regards,

Investorclb

__
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/

-
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/   (the list archive)

To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail [EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php