I could do this with a basic timestamp that's unencrypted, but I know that that would be very easy to crack.

John McGowan wrote:

I need to solve the following problem...

Take a string and Encrypt is using Cold Fusion.

use that encrypted string in a URL link to a Witango server

Witango server decrypts to find the original string.

The original string is just a timestamp, and if the timestamp falls within an acceptable window relative to the current time, we allow the user to proceed. allowing for minor differences in time on the two web servers.

Here are the following assumptions.
1. both the cf server and the Witango server will have the encryption and decryption password locally hard coded.
2. the window will be something like 1 day so that if someone trys to bookmark the link containing the encrypted timestamp they won't be able to use it a day later...forcing them to go back to the cf site to get a new link.


I looked into the encrypt and decrypt functions available in CF, but the document doesn't mention what algorithm they use, so I have no idea if they will be compatible with and of the decryption routines available in Witango.

Ideas?

/John


________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf


________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf

Reply via email to