LoginMD5.pm (Perl/CGI - Javascript User Authentication)
[email protected] ("Alan Raetz") Sat, 24 Aug 2002 21:12:32 -0700
| Newsgroups | perl.crypto |
|---|---|
| Message-ID | <024c01c24bed$a3584a80$c372fea9@compaq> |
Hi, I created a module for Perl/CGI script user authentication that uses MD5 encryption on both the client browser (using Javascript) and on the server (using Digest::MD5) and I wanted to solicit comments and get any feedback from the group. http://perl-md5-login.sourceforge.net/ http://sourceforge.net/projects/perl-md5-login/ I'm definitely not a security expert, this was just something I needed for my own project that I decided to make open-source, it seemed like something other people could use... The additional feature that I have working but haven't released is tying the cookie to the IP address; a user can move around, but each session is tied to the cookie hash. But I know this is just an environment variable that can also be hacked... One thing I'm wondering if is if this could possibly be a candidate for CPAN... comments? -alan