Trihedralguy has asked for the wisdom of the Perl Monks concerning the following question:

I have an interesting question
I'm still fairly new to perl, but I'm getting better and better every week. Its actually quite a fun language to program in. Anyway, for a new project I'm working on, I need to figure out how to make a secure log in from a form submission to a CGI script.
What steps should I take in order to keep the data secure?
Are there any good Perl articles out there that could help me with securing data in the way I need it?
Does anyone with experience have any suggestions?

Sorry I know this isnt a "programming" type issue, but I'm sure I have the right place to post this on, to get going in the correct direction.

Thanks!

Replies are listed 'Best First'.
Re: Perl Oracle Login
by almut (Canon) on Feb 12, 2007 at 16:36 UTC

    Using the HTTPS protocol (SSL) would probably be the most effective measure against all kinds of security issues. There are prerequisites, though, like obtaining certificates. The details largely depend on what exactly you want to do...

Re: Perl Oracle Login
by Moron (Curate) on Feb 12, 2007 at 16:34 UTC
    The common or garden approach is to issue cookies to ensure data is only sent to the user who is "logged in" to your site. CGI and cookies are featured very heavily in the CGI::Session::Tutorial, CGI::Session being a popular place to find session management tools.

    In addition there are the more specialised CGI::SecureState and Apache::Session.

    Update: DBI is the most common Perl/Oracle interface and although the database session has to be understood as distinct from the CGI session, you can nevertheless make the CGI session available to Oracle using CGI::Session::Auth::DBI, which uses yet another authentication style.

    -M

    Free your mind