http://qs1969.pair.com?node_id=139236


in reply to Re: Re: Re: Perl Win32 Apache/IIS Session Management
in thread Perl Win32 Apache/IIS Session Management

I agree with Cyphering, but we got to remember that the calling code is written in ASP.

Does ASP supports the encryptions as the same way as Perl does, to have a exact crypt->decrypt pair?

Now coming back to original case, can anyone give me an idea how one can fetch the session information of IIS from perl code(I mean .pl codes not the perlscripted ASP code)?

If yes how can I initiate IIS session object in my perl code which would reurn me session data.

Thanks

Replies are listed 'Best First'.
Re: IIS sessions from perl?
by $code or die (Deacon) on Jan 16, 2002 at 23:49 UTC
    Now coming back to original case, can anyone give me an idea how one can fetch the session information of IIS from perl code(I mean .pl codes not the perlscripted ASP code)?

    If yes how can I initiate IIS session object in my perl code which would reurn me session data.
    I've already explained in the first post that you can't access the IIS Session object anywhere EXCEPT from the ASP application. That's why I suggested dumping the Session data somewhere for the non-ASP code to read. Reread my original post.
    Does ASP supports the encryptions as the same way as Perl does, to have a exact crypt->decrypt pair?
    ASP isn't a language. From your post it is not clear what language you are using in your ASP. It suggests you are using PerlScript rather than VBScript. If you're using PerlScript, then yes, you can encrypt/decrypt in the same way you can in normal perl scripts. If you're using VBScript, you'll have to find an encryption component that uses a known encryption method so you can decrypt in perl.

    But by far the easiest method is that which I described earlier: Iterate through the ASP Session collection and store the data on the server (database or file). Associate a random key with that data, and use that key in the querystring. So when you link to your Apache website, you do something like this:

    http://apacheserver/myscript.pl?id=fh45sg#45dgf.
    Your perl script then accesses and reads in the session data into a hash. Make sure that the key is as random as possible and difficult to guess someone else's key. Making them invalid after a certain time would also be a good precaution.

    Simon Flack ($code or die)
    $,=reverse'"ro_';s,$,\$,;s,$,lc ref sub{},e;$,
    =~y'_"' ';eval"die";print $_,lc substr$@,0,3;
[reply]
[d/l]

In Section Seekers of Perl Wisdom