landon: VVLOW: useracctdisplay script

Date: Wed, 14 May 1997 16:01:53 -0300
From: Gerard MacNeil <macneil@chebucto.ns.ca>
To: csuite-tech@chebucto.ns.ca
Precedence: bulk

next message in archive
next message in thread
previous message in archive
previous message in thread
Index of Subjects

Index of Subjects
On Wed, 14 May 1997, James Fifield wrote:

> The cgi-bin/useracctdisplay script uses the following line to partially identify 
> a user if identd is unable to:
> 
> elif [ -f $CS_ROOT/home/`login2dir "$cgi_LOGIN"`/.forward ]
> 
> I would like to change this to a file that's more likely to exist, (.lynxrc for 
> instance), at a much later date.
> 

Very bad idea.  The contents of the .forward file is checked later in the
script to see if the users login host system reports the same user@host

This check is to determine if somebody using Netscape can check their
membership status on the CSuite host.  I figured if the user@host is
getting the mail from the CSuite host then they should be able to check
their membership status as well.

It is actually *very* insecure and probably should be eliminated entirely.
The user would just have to login to check their membership status.

Gerard MacNeil, P. Eng.



next message in archive
next message in thread
previous message in archive
previous message in thread
Index of Subjects