You are viewing a plain text version of this content. The canonical link for it is here.
Posted to embperl@perl.apache.org by David Lloyd <ll...@rebel.net.au> on 2001/06/09 11:47:40 UTC
The Request Record
How "secure" is the request record which is shunted around various parts
of EmbperlObject? Obviously you would still encrypt any sensitive data
which you'd added to it, but I'd surmise that it's possibly a little
more secure than using hidden form fields.
(Because anyone can just view the source whereas I suspect hijacking the
request record would take a little more effor).
DSL
--
while (<STDIN>) {
if (/perl is modem line noise/i) {
print "BULLSHIT";
} else { print; }}
---------------------------------------------------------------------
To unsubscribe, e-mail: embperl-unsubscribe@perl.apache.org
For additional commands, e-mail: embperl-help@perl.apache.org
Re: The Request Record
Posted by Gerald Richter <ri...@ecos.de>.
>
> How "secure" is the request record which is shunted around various parts
> of EmbperlObject? Obviously you would still encrypt any sensitive data
> which you'd added to it, but I'd surmise that it's possibly a little
> more secure than using hidden form fields.
>
the request record can be used to pass data between different files of the
_same_ request. Data is only store in memory, so there is no chance for
anybody outside ever seeing this data. If you want to pass data to a
following request, you must use %udat. In this case Embperl creates a
session id and sends it via a cookie to the browser. Only the session id is
send. The data never leaves your server and can't be seen or modified form
outside.
Gerald
-------------------------------------------------------------
Gerald Richter ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting
Post: Tulpenstrasse 5 D-55276 Dienheim b. Mainz
E-Mail: richter@ecos.de Voice: +49 6133 925131
WWW: http://www.ecos.de Fax: +49 6133 925152
-------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: embperl-unsubscribe@perl.apache.org
For additional commands, e-mail: embperl-help@perl.apache.org