CGI scripts, security and MySQL

2004-09-03 Thread michael watson (IAH-C)
Hi I need to know what is the accepted way of handling the following. I have a MySQL database, and a host of CGI scripts which present forms to the users as web pages, they fill them in and then the data is written to the database. I need to make this secure such that only users I want can use t

RE: ODBC

2004-09-03 Thread Ron Goral
> -Original Message- > From: Wiggins d Anconia [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 01, 2004 8:33 AM > To: Rearick, Kenneth N.; '[EMAIL PROTECTED]' > Subject: Re: ODBC > > > > > > > > > > I have a CGI program in which I am trying to access a database. When I > run the co

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, michael watson (IAH-C) wrote: I need to make this secure such that only users I want can use the system. I want to set up a username and password so that users can log in once at the beginning of a session, carry out their work filling in various forms and writing to the dat

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
Hi, You can put something like this, in httpd.conf file: include ...path_to_file And make the directory where sits that file readable only by the root user. Then, in that file, put something like: SetEnv usr user_name SetEnv pass parolissima Those 2 environment variables will be seen by any s

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: You can put something like this, in httpd.conf file: include ...path_to_file And make the directory where sits that file readable only by the root user. Then, in that file, put something like: SetEnv usr user_name SetEnv pass parolissima Those 2 environme

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
No, the environment variables are set a single time at the start (or restart) of the web server. The problem is that if there is any change in httpd.conf file, the server must be restarted and this might not be very easy for a system with very many users, but it is not impossible. Teddy - Ori

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: No, the environment variables are set a single time at the start (or restart) of the web server. Ok, that's what I thought. So in what way does this help manage a pool of several users? This seems to be a solution in search of some other problem... -- Ch

Re: CGI scripts, security and MySQL

2004-09-03 Thread Octavian Rasnita
This might be helpful for more users, because a system admin can create automaticly a special dir where the users can put their config files, and "insert" that file in httpd.conf. After that, every user can create its own config file, with any variables they want (their names should not be only "us

RE: ODBC

2004-09-03 Thread Rearick, Kenneth N.
Thanks for the help. It turned out to be a setup problem with ODBC the DNS was in the user area not the system. But the information on tracing errors help identify where the problem was located. -Original Message- From: Ron Goral [mailto:[EMAIL PROTECTED] Sent: Friday, September 03, 20

Re: CGI scripts, security and MySQL

2004-09-03 Thread Chris Devers
On Fri, 3 Sep 2004, Octavian Rasnita wrote: This might be helpful for more users, because a system admin can create automaticly a special dir where the users can put their config files, and "insert" that file in httpd.conf. After that, every user can create its own config file, with any variabl