Subject | Re: [firebird-php] Username and password authentication |
---|---|
Author | Jochem Maas |
Post date | 2006-10-30T15:56:36Z |
anna_ppalm wrote:
concerned it an untrusted piece of information and quite possibly not even
available depending on what kind of router(s)/gateway(s) as user is behind.
then again if people are allowed to connect to a site only from known
public static IP addresses then you have a metric which is of some value
in detemining authenticity.
logging into a website and logging into a firebird are 2 different things -
normally one creates a single DB login for the site and then in the website itself
define a set of website logins used to access the page. you can of course
define a DB login for every user and set each user's perms accordingly BUT if you do
that you are theoretically giving these users direct access to the DB (e.g.
via the isql commandline tool) which is probably more power than most users
need/want/should-be-given.
> Hellovalidating an IP address is usually close to pointless... as far as your script is
>
> Can anyone give me some code for a username/pass PHP-firebird table and
> html??
>
> I will have just a few users with will login from different computer. I
> would have to validate their IP address, username and pass. Once all of
concerned it an untrusted piece of information and quite possibly not even
available depending on what kind of router(s)/gateway(s) as user is behind.
then again if people are allowed to connect to a site only from known
public static IP addresses then you have a metric which is of some value
in detemining authenticity.
logging into a website and logging into a firebird are 2 different things -
normally one creates a single DB login for the site and then in the website itself
define a set of website logins used to access the page. you can of course
define a DB login for every user and set each user's perms accordingly BUT if you do
that you are theoretically giving these users direct access to the DB (e.g.
via the isql commandline tool) which is probably more power than most users
need/want/should-be-given.
> it is done, each of them would be able to access the DB which in turn
> would generate a different report for each user.
>
> In advance I thank you for your help.
>
> Anna
>
>
>
>
>
>
> Yahoo! Groups Links
>
>
>
>