ruth# perl -MDigest::MD5=md5_base64 -e 'print md5_base64("submij","#f%
+w#$g0?")'
NlAxyO72B/aVIBYf1eOBFw
[download]

2) The contents of the config file

{
  salt => '#f%w#$g0?',
  users => '/usr/local/httpd/data/users/'
}
[download]

3) the print out from the web page which includes the password from the form, the generated digest, the digest read from the file and the salt read from the file

>submij::uElfm86fvqS1TDQlO6vlPA::NlAxyO72B/aVIBYf1eOBFw::#f%w#$g0?
[download]

4) the source code

#!/usr/bin/perl
use strict;

use CGI::Pretty qw(:standard);
use Digest::MD5 qw(md5_based64);

use constant USER_DATA => '/usr/local/httpd/data/users/';
use constant ERR_MSG => 'Your username and password information did no
+t match.
#!/usr/bin/perl
use strict;

use CGI::Pretty qw(:standard);
use Digest::MD5 qw(md5_based64);

use constant CONF => '/usr/local/httpd/data/users/';
use constant ERR_MSG => 'Your username and password information did no
+t match.
Check to see that you do not have Caps Lock on, hit the back button, a
+nd try
again.';

my $config = do(CONFIG}'

#!/usr/bin/perl
use strict;

use CGI::Pretty qw(:standard);
use Digest::MD5 qw(md5_base64);
use CGI::Carp   qw(fatalsToBrowser);

use constant CONF => '/usr/local/httpd/data/users/';
use constant ERR_MSG => 'Your username and password information did no
+t match.
Check to see that you do not have Caps Lock on, hit the back button, a
+nd try aga
in.';

my $config = do(CONF);

my $_username = param( 'username' ) || '';
my $_password = param( 'password' ) || '';
my $_remember = param( 'remember' ) || '';
my ($username) = ($_username =~ /(\w+)/);
my ($password) = ($_password =~ /(\w+)/);
my ($remember) = ($_remember =~ /(\w+)/);
use CGI::Carp   qw(fatalsToBrowser);

use constant CONF => '/usr/local/httpd/data/users/';
use constant ERR_MSG => 'Your username and password information did no
+t match.
Check to see that you do not have Caps Lock on, hit the back button, a
+nd try aga
in.';

my $config = do(CONF);

my $_username = param( 'username' ) || '';
#!/usr/bin/perl
use strict;

use CGI::Pretty qw(:standard);
use Digest::MD5 qw(md5_base64);
use CGI::Carp   qw(fatalsToBrowser);

use constant CONF => '/usr/local/httpd/data/conf/test.conf';
use constant ERR_MSG => 'Your username and password information did no
+t match.
Check to see that you do not have Caps Lock on, hit the back button, a
+nd try aga
in.';

my $config = do(CONF);

my $_username = param( 'username' ) || '';
my $_password = param( 'password' ) || '';
my $_remember = param( 'remember' ) || '';
my ($username) = ($_username =~ /(\w+)/);
my ($password) = ($_password =~ /(\w+)/);
my ($remember) = ($_remember =~ /(\w+)/);

# the rest of the program goes here.

my $userfile = $config->{ users } . $username;
my $message = ERR_MSG;
$message = $config->{users} . $username;
open (USER, "< $userfile") or display_page($userfile . $username), exi
+t;
chomp (my ( $real_password, $sessionID, $remember) = <USER>);
close USER;

my $digest = md5_base64($password,$config->{salt});
if ($digest eq $real_password)
{
  $message = "Hello, $username. You gave me a good password";
}

display_page('>'.$password . '::' .$digest. '::'.$real_password . '::'
+ .$config-
>{salt});
exit;

sub display_page
{
  my $message = shift;
  print header, start_html, p($message). end_html;
}
[download]

>submij::uElfm86fvqS1TDQlO6vlPA::NlAxyO72B/aVIBYf1eOBFw::#f%w#$g0?
[download]