[Kepler-Project] how to use POST method in lua??

venice chong venicechong at gmail.com
Fri Dec 21 23:06:47 GMT+3 2007


yupe...actually i did plan to use the pajhome hashing method..
so the password sent out to the server side is hashed..
and now how to get the hashed password at server side..??
in lua..


On Dec 22, 2007 6:16 AM, Andre Carregal <carregal at fabricadigital.com.br>
wrote:

> On Dec 21, 2007 7:04 AM, venice chong <venicechong at gmail.com> wrote:
> > how to use POST method in lua??
>
> You don't POST in Lua, but you can generate a HTML form that contains
> a form with fields. Those fields could then be POSTed by the browser
> and next handled by Lua.
>
> > ...
> > if i use cgilua.POST.passwd in main.lp it will get value client
> > typed...instead of after-hashed passwd..
> > like :
> > <input type="password" name="passwd" id="passwd" value="<%= passwd %>"
> > size="20" >
>
> True, the examples in CGILua use this pattern but they are not to be
> considered secure.
>
> If you want to use hashing in your login form (which is very
> reasonable) you may want to check these references:
> http://pajhome.org.uk/crypt/md5/auth.html
> http://www1.infotech.indiatimes.com/articleshow/msid-553621,prtpage-1.cms
>
> André
>
> _______________________________________________
> Kepler-Project mailing list
> Kepler-Project at lists.luaforge.net
> http://lists.luaforge.net/cgi-bin/mailman/listinfo/kepler-project
> http://www.keplerproject.org/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.luaforge.net/pipermail/kepler-project/attachments/20071222/563d40bc/attachment.html


More information about the Kepler-Project mailing list