Re: [naviserver-devel] Session module

2009-02-20 Thread Vlad Seryakov
I know, i asked just in case:-)) But if you combine seqid with currenttime in milliseconds for example and produce md5 hash including IP address, it will be much more difficult to hijack just base don sequential number Ian Harding wrote: > Vlad Seryakov wrote: >> Why not to use nsv_incr to gene

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Vlad Seryakov wrote: > Why not to use nsv_incr to generate sequential session id? > > Or sequential ids is a bad idea? > > It makes it super easy to hijack sessions. They are supposed to be difficult to brute force. > Ian Harding wrote: > >> Stephen Deasey wrote: >> >>> On Sun, Feb 15,

Re: [naviserver-devel] Session module

2009-02-20 Thread Vlad Seryakov
Why not to use nsv_incr to generate sequential session id? Or sequential ids is a bad idea? Ian Harding wrote: > Stephen Deasey wrote: >> On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: >> >>> Hello, >>> >>> I am migrating to Naviserver from AOLServer mostly because of the >>> excellent n

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Stephen Deasey wrote: > On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: > >> Hello, >> >> I am migrating to Naviserver from AOLServer mostly because of the >> excellent nsdbi module. >> >> My existing code is depended on the nssession module >> http://bas.scheffers.net/aolserver/ . It doe

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Stephen Deasey wrote: > On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: > >> Hello, >> >> I am migrating to Naviserver from AOLServer mostly because of the >> excellent nsdbi module. >> >> My existing code is depended on the nssession module >> http://bas.scheffers.net/aolserver/ . It doe

Re: [naviserver-devel] Wiki Account

2009-02-20 Thread Vlad Seryakov
Well, in PmWiki we use TinyMCE for editing but using Tcl wiki has one advantage that other solutions do not: it is already running, it is free and it does not require special server or maintenance except the Wiki content itself. Still we need to host somewhere our generated documentation which w

Re: [naviserver-devel] Wiki Account

2009-02-20 Thread Gustaf Neumann
Bernd Eidenschink schrieb: >> Very nice idea! >> I am for this. >> > > good idea! > (i wonder, though, when will wikis eventually add some kind of TinyMCE et. > al.) > well, see e.g. http://alice.wu-wien.ac.at:8000/xowiki-doc/ -gustaf neumann > Gave it a try with the "watchdog" article

Re: [naviserver-devel] Wiki Account

2009-02-20 Thread Bernd Eidenschink
>Very nice idea! >I am for this. good idea! (i wonder, though, when will wikis eventually add some kind of TinyMCE et. al.) Gave it a try with the "watchdog" article: http://wiki.tcl.tk/22570 -- Open Source Business C