Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 1 Sep 1998 17:00:23 -0700 (PDT)
From:      David Hawkins <dhawk@river.org>
To:        jason@intercom.com (Jason J. Horton)
Cc:        freebsd-isp@FreeBSD.ORG, isp-tech@isp-tech.com
Subject:   Re: webbased email/adding new users
Message-ID:  <199809020000.RAA29250@ohio.river.org>
In-Reply-To: <35EC7715.29886974@intercom.com> from "Jason J. Horton" at "Sep 1, 98 06:37:09 pm"

next in thread | previous in thread | raw e-mail | index | archive | help

> A client wants to do a Hotmail type service(doesn't
> everyone?) and I am wondering how to add new users via
> forms, like hotmail does, with the webserver running
> as a non-privilidged user and without opening a whole
> bunch of security problems for the system. Any ideas?
> Please email me or the list
 
I have about a 400 line perl script that use CGI.pm to put up a form
and get all the necessary fields filled in and do some data checking.
It then uses sendmail to mail to a special account. Every line is
prefixed with XXX to avoid any special escape tricks. The other
account has a procmail filter running that extracts the data. We then
have someone check the account, but if you're not doing a $$$ deal
then you could have that account hand it off to a suid-perl script that
would install the account.

later, david
--
David Hawkins  -- dhawk@river.org        http://www.river.org/~dhawk
"How I wait for my good is more important than what I wait for. Life is
not living in a 'waiting room', but rather waiting in a 'living room'."
			-- Dr. Dorothy Kobak

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199809020000.RAA29250>