[Israel.pm] CGI::Session

[Gabor Szabo]

On Fri, Feb 29, 2008 at 11:25 AM, ik <idokan at gmail.com> wrote:
> Hello,
>
>  The use of a session is to save data like in cookie, where the only
>  difference is that it is stored on the server side rather then the
>  client side (that only stores the identifier of the session as a
>  cookie).
>
>  So your authentication should look like so:
>
>  if ($session['user'] ne '' and $session['authenticated'] eq 1)
>  {
>   user already authenticated
>  }
>  else
>  {
>    do a regular authentication process
>
>    $session['user']              = $user;
>    $sesson['authenticated'] = 1;
>    ...
>  }
>
>  One very important rule for CGI::Sessions, you must flush the data
>  before you finish your work or you will have strange errors and
>  problems.
>
>  Ido
>
>
>
>  On Fri, Feb 29, 2008 at 11:11 AM, Shmuel Fomberg <semuelf at 012.net.il> wrote:
>  > Hello All.
>  >
>  >  I'm trying to write a new web site, and was reading about CGI::Application
>  >  and CGI::Session.
>  >  I understand how the CGI::Session use some storage (either file of a
>  >  simplified database table) to store session information, and a cookie to
>  >  connect the user to that session. But how do I authenticate the user? Where
>  >  in the loop I verify user name/password, and say 'I know this user, this is
>  >  his data', for the Session object to keep?
>  >
>  >  Thanks,
>  >  Shmuel.
>  >

While to some of you that might be obvious but let me make sure
that anyone reading our archives will also understand that the
example above is actually in PHP.

In Perl a hash is not the same as an array and thus the
variable needs {} around the key.
The example is better written in Perl like this:


if ($session{user} and $session{authenticated}) {
   # user already authenticated
}  else {
   # do a regular authentication process
   $session{user}              = $user;
   $sesson{authenticated} = 1;
   ...
}

Gabor



-- 
Gabor Szabo
http://www.szabgab.com/
Perl Training in Israel  http://www.pti.co.il/
Profile: http://www.linkedin.com/in/szabgab