Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > Perl > How to lock down WWWBOARD?

Reply
Thread Tools

How to lock down WWWBOARD?

 
 
Don
Guest
Posts: n/a
 
      04-22-2005
I'm using" wwwboard" and am starting to get porn postings from outside the
closed group that uses it. I'm not that familar with Perl, do most of my
work using JS and PHP. So, was wondering what code to add to check for a
login username and password that exist on the client's machine as cookies.
In PHP I'd pick them up using "$_COOKIE['<cookie name>']. How do I do it in
Perl? Can you give me some sample code for checking them? I guess the code
would be added somewhere in the "wwwboard.pl"l file?

Sure would appreciate some help with this.

Thanks,
Don

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
 
Reply With Quote
 
 
 
 
Jim Gibson
Guest
Posts: n/a
 
      04-22-2005
In article <>, Don
<> wrote:

> I'm using" wwwboard" and am starting to get porn postings from outside the
> closed group that uses it. I'm not that familar with Perl, do most of my
> work using JS and PHP. So, was wondering what code to add to check for a
> login username and password that exist on the client's machine as cookies.
> In PHP I'd pick them up using "$_COOKIE['<cookie name>']. How do I do it in
> Perl? Can you give me some sample code for checking them? I guess the code
> would be added somewhere in the "wwwboard.pl"l file?
>
> Sure would appreciate some help with this.


What version of wwwboard are you using? If you are using the one from
Matt's Script Archive, you should know that those scripts are
notoriously insecure. There are drop-in replacements at
http://nms-cgi.sourceforge.net/

The NMS version of wwwboard uses the perl CGI module, so you can set
cookies with the -cookie option to the header() function and retrieve
them with the cookie() function. See the length 'perldoc CGI' for more
info.

FYI: this newsgroup is defunct. Try comp.lang.perl.misc in the future
for general Perl questions and comp.lang.perl.modules for help with
Perl modules like CGI.

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
 
Reply With Quote
 
 
 
 
Don
Guest
Posts: n/a
 
      04-22-2005
On Fri, 22 Apr 2005 09:27:02 -0700, Jim Gibson <>
wrote:

>In article <>, Don
><> wrote:
>
>> I'm using" wwwboard" and am starting to get porn postings from outside the
>> closed group that uses it. I'm not that familar with Perl, do most of my
>> work using JS and PHP. So, was wondering what code to add to check for a
>> login username and password that exist on the client's machine as cookies.
>> In PHP I'd pick them up using "$_COOKIE['<cookie name>']. How do I do it in
>> Perl? Can you give me some sample code for checking them? I guess the code
>> would be added somewhere in the "wwwboard.pl"l file?
>>
>> Sure would appreciate some help with this.

>
>What version of wwwboard are you using? If you are using the one from
>Matt's Script Archive, you should know that those scripts are
>notoriously insecure. There are drop-in replacements at
>http://nms-cgi.sourceforge.net/
>
>The NMS version of wwwboard uses the perl CGI module, so you can set
>cookies with the -cookie option to the header() function and retrieve
>them with the cookie() function. See the length 'perldoc CGI' for more
>info.
>
>FYI: this newsgroup is defunct. Try comp.lang.perl.misc in the future
>for general Perl questions and comp.lang.perl.modules for help with
>Perl modules like CGI.
>
>----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
>http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
>----= East and West-Coast Server Farms - Total Privacy via Encryption =----

Thanks for your reply Jim. I'm using the NMS version, but am getting daily
porn posts. Figured if I check to see if there is a username/password login
(which I have in client's cookies) I could put a stop to this. Say, where
do I find the 'perldoc CGI' you mentioned? I was hoping to implement a
quick fix. Looks like I'm going to have to do some homework. That's ok,
about time I learned a little about Perl.

Thanks,
Don

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
 
Reply With Quote
 
Don
Guest
Posts: n/a
 
      04-22-2005
On Fri, 22 Apr 2005 09:57:45 -0700, Don <> wrote:

>On Fri, 22 Apr 2005 09:27:02 -0700, Jim Gibson <>
>wrote:
>
>>In article <>, Don
>><> wrote:
>>
>>> I'm using" wwwboard" and am starting to get porn postings from outside the
>>> closed group that uses it. I'm not that familar with Perl, do most of my
>>> work using JS and PHP. So, was wondering what code to add to check for a
>>> login username and password that exist on the client's machine as cookies.
>>> In PHP I'd pick them up using "$_COOKIE['<cookie name>']. How do I do it in
>>> Perl? Can you give me some sample code for checking them? I guess the code
>>> would be added somewhere in the "wwwboard.pl"l file?
>>>
>>> Sure would appreciate some help with this.

>>
>>What version of wwwboard are you using? If you are using the one from
>>Matt's Script Archive, you should know that those scripts are
>>notoriously insecure. There are drop-in replacements at
>>http://nms-cgi.sourceforge.net/
>>
>>The NMS version of wwwboard uses the perl CGI module, so you can set
>>cookies with the -cookie option to the header() function and retrieve
>>them with the cookie() function. See the length 'perldoc CGI' for more
>>info.
>>
>>FYI: this newsgroup is defunct. Try comp.lang.perl.misc in the future
>>for general Perl questions and comp.lang.perl.modules for help with
>>Perl modules like CGI.
>>
>>----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
>>http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
>>----= East and West-Coast Server Farms - Total Privacy via Encryption =----

>Thanks for your reply Jim. I'm using the NMS version, but am getting daily
>porn posts. Figured if I check to see if there is a username/password login
>(which I have in client's cookies) I could put a stop to this. Say, where
>do I find the 'perldoc CGI' you mentioned? I was hoping to implement a
>quick fix. Looks like I'm going to have to do some homework. That's ok,
>about time I learned a little about Perl.
>
>Thanks,
>Don
>
>----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
>http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
>----= East and West-Coast Server Farms - Total Privacy via Encryption =----

Oh, and thanks for the heads-up on the other newsgroups.
Don

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
 
Reply With Quote
 
Jim Gibson
Guest
Posts: n/a
 
      04-22-2005
In article <>, Don
<> wrote:

> On Fri, 22 Apr 2005 09:27:02 -0700, Jim Gibson <>
> wrote:
>
> >In article <>, Don
> ><> wrote:
> >


> Say, where
> do I find the 'perldoc CGI' you mentioned?


perldoc is a command-line utility available in most Perl distributions.
If that doesn't work, try 'man CGI'. If that doesn't work, look for
some HTML files somewhere, depending upon your platform and Perl
distribution.

Now, please stop posting in this newsgroup before the usenet nazi's get
us in trouble.

----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Read-Write Lock vs primitive Lock() k3xji Python 7 12-30-2008 10:19 PM
Application.Lock()/UnLock() or lock(Application) nano2k ASP .Net Web Services 2 08-09-2007 09:31 AM
Utility to lock down Mozilla in a Public WinXP environment? Pavlov Firefox 4 02-21-2005 11:24 PM
Threading - Why Not Lock Objects Rather than lock the interpreter Fuzzyman Python 3 12-05-2003 10:43 PM
RE: Threading - Why Not Lock Objects Rather than lock theinterpreter Robert Brewer Python 0 12-05-2003 05:33 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57