Re: CGI and Security

[Mark Bauman <mlbauman@xxxxxxxxxxxx>]

Bill, 

Excerpts from mail: 29-Aug-97 CGI and Security "Bill Phelps"@alpha.obu. (1169) 

> Just wondering how folks are securing web information.  I would  
> like for students to be able to check their current balance and grade  
> information from the web.  Writing the CGI programs is not a problem. 
> I can assign a PIN number to the student and make them log in the  
> first web page and then pass the PIN number from page to page in a  
> hidden field, but how do you stop the pages from being cached.  I  
> have people sharing machines.  All ideas are most welcome.  I think  
> this issue is relavent to everyone out there developing web  
> applications. 


The HTTP server is SSL enabled in V4R1 though you need to buy ($295)
either 5769-NC1 or 5769-NCE  (the "e" is for export version) in order to
enable that part of it.   You must of course, install it, configure it
and obtain a server certificate in order to run it.  Or if that is  too
much overhead for what you want to do - try basic authentication of the
HTTP server - that is also available in V4R1.   

For pre-V4R1, contact I/NET - who is listening intently to this list -
right?  <bg> 

Mark L Bauman 
AS/400 Software Communications Development   
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---