Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 3 of 3
  1. #1
    New to the CF scene
    Join Date
    May 2012
    Posts
    2
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Authentication and autorization

    Hello,

    We have a large website which is controlled by PERL scripts which in turn basically redirect the users to some contents (like pdfs,docs etc.) without any authentication and authorization. The site runs in intranet and Apache is the web server.

    The requirement is that we need to implement authentication using a web service call and authorization using a local MySQL DB. The controlling PERL scripts will be grouped into protected and unprotected, and whoever is authenticated and authorized can view all and the rest can view only the unprotected.

    The initial idea was to go for sessions and update each PERL script to have the authentication/authorization check but as the number of scripts are more than 100, we were wondering if there is an alternate way by which we can achieve this.

    As a side note, if the user tries to access, any pages in the web site, the user has to be redirected to the login page where he will be authenticated and authorized.

    I apologize in advance, if I've posted this in the wrong place.

  • #2
    God Emperor Fou-Lu's Avatar
    Join Date
    Sep 2002
    Location
    Saskatoon, Saskatchewan
    Posts
    16,979
    Thanks
    4
    Thanked 2,659 Times in 2,628 Posts
    Sure, the only way I can think of is to simply rewrite any input and focus it towards a single point of entry providing the input request as a part of the querystring. Use this point of entry to figure out where it has to go based on the provided querystring. The single point of entry can handle any authentication and sessions as you see fit, and redirect or include as necessary. That should work methinks with minimal modifications.
    A larger picture would be that you want to achieve this effect naturally within the system. That would require a code rewrite to force a single entry point to control the entire handling. PHP is relatively easy to do, but I haven't written Perl in years, and haven't touched Perl in a web environment since PHP FI2 (so about 10 years ago or so).

  • Users who have thanked Fou-Lu for this post:

    vasanth (05-16-2012)

  • #3
    New to the CF scene
    Join Date
    May 2012
    Posts
    2
    Thanks
    1
    Thanked 0 Times in 0 Posts
    Thank you . Will update if we could not achieve using the method you have given.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •