Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 31 Jan 1997 12:39:38 +1100 (EST)
From:      "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To:        Brandon Gillespie <brandon@cold.org>
Cc:        Ernie Elu <ernie@spooky.eis.net.au>, freebsd-isp@freebsd.org
Subject:   Re: Password change via Web page
Message-ID:  <Pine.BSF.3.91.970131123849.263N-100000@panda.hilink.com.au>
In-Reply-To: <Pine.NEB.3.95.970130180648.22304A-100000@cold.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On Thu, 30 Jan 1997, Brandon Gillespie wrote:

> > Does anyone know of a method whereby a user can change his or her password
> > via a web page just using netscape or any other common browser?
> 
> There are many, none of which you want to do because of extreme security
> problems (basically the CGI would hav to run as root, plus you would want
> to run it under an SSL server).
> 
> BUT, if you insist upon this unsecure method, just have a cgi script
> running as root which calls 'passwd' with the correct username and
> password.  Course, piping into passwd may be hard, use perl, or write your
> own 'passwd' program..

Probably easiest thing to do is to hack poppassd so that it understands 
an http request.

Danny



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.970131123849.263N-100000>