Beefy Boxes and Bandwidth Generously Provided by pair Networks
P is for Practical
 
PerlMonks  

Re: mod_perl

by httptech (Chaplain)
on Jul 10, 2000 at 06:05 UTC ( [id://21744]=note: print w/replies, xml ) Need Help??


in reply to mod_perl, Apache::Session

There's a potential bug in your code that might affect you down the road.

The bug would occur if you ended up with two usernames that were identical, except for case, and the password was the same. So, if you have a user 'foo' registered, but lets say he forgot to capitalize his name, so he hit the back button and entered 'Foo' as the username with the same password.

Since MySQL comparisons with the '=' operator are case-insensitive, your rows returned would be 2, which is != 1, so foo would be locked out using either username.

Of course, you can get around this with careful attention to detail on the input side. How you fix it depends on how much leniency you want to give your users. It's a rare situation, but one you should watch out for when making username/password checking scripts with MySQL.

Replies are listed 'Best First'.
RE: Re: mod_perl
by le (Friar) on Jul 10, 2000 at 11:44 UTC
    Since MySQL comparisons with the '=' operator are case-insensitive,...

    Whoops, I didn't know that! Shame on me! Thanks for pointing that out.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://21744]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others having an uproarious good time at the Monastery: (6)
As of 2024-03-28 18:45 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found