[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] poll for server's users



> On Tue, Mar 30, 2004 at 11:23:53AM +0100, Phil Beynon wrote:
>
> Hello Phil,
>
> > Depends how your authentication script works really, if you can
> catch the
> > data as they log in via a mysql table you can then set up a
> little database
> > to say he/she logged in and has or has not voted,
>
> I guess this is the point. The users on a raq & their passwords
> are not in
> a mysql table. Perhaps I was unclear: I mean the users with a valid
> account, for p.e. pop3.
>
> All poll/vote scripts I have found can't seem to use the 'linux
> users database'.
> --
> Maurice de Laat

Hi Maurice,
I would guess there would be security implications giving scripts password
file access, plus even in PHP I've never tried to do anything against the
passwords file, though I guess it could be done.
I suppose depending on how many users you are talking about here it might be
better to do a "voter registration" script  which then built a database up
as it went, where they just enter their email and it mails them a password
then they are able to vote, then just authenticate them against the
registration table.
Since they would have to have a mail account on your server to get the
password then any non authorised people wouldn't get the password and you
could ensure quite simply that they only voted once.

Phil

** http://www.diygear.com THE Online DIY Toolstore For DIY & Business
** Infolink Electronic Systems Ltd. http://www.infolinkelectronics.co.uk
** Professional Web Design & Cobalt Hosting Solutions
** Sun Cobalt iForce Reseller - Canon Silver Reseller
** Contact: Sales@xxxxxxxxxxxxxxxxxxxxxxxxx
** Tel / Fax 0121 458 4894 (office) 0121 441 3558 (home)