Re: [cobalt-users] CGI guru

["Robert Davis" <rdavis@xxxxxxxxxxx>]

Ahoy Manuel

You ask:

> ... can I trust if the REMOTE_USER is set to "admin"
> that it is the admin user ?

Think of it this way:

You can trust that it is admin if it was the true admin who logged in. 

You cannot trust that it was an admin named Manuel Manitu who 
logged in. It may have been E. Vilhacker. But, chances are, E. 
Vilhacker would come via FTP or Telnet, rather than via GUI.
For one thing, the GUI limits what he can do.

In other words, you may be looking at the head of the bull, probing 
for weak spots. He is much softer in other places.

Aloha
Davis