[Tutor] Help with cookies/auth
anilmrn at yahoo.com
Sat Sep 23 00:34:24 CEST 2006
web.setcookie('user', '', 'Mon, 01-Jan-2000 00:00:00 GMT')
File "<input>", line 1
n-2000 00:00:00 GMT') compare datetime.datetime to int
SyntaxError: invalid syntax
Im trying to set a cookie after logging an user in. If someone has some
code for doing this it ll be great
the code I use for storing passwds is this
algo = 'sha1'
salt = sha.new(str(random.random())).hexdigest()[:5]
hsh = sha.new(salt+i.password).hexdigest()
password_algo_salt_hash = '%s$%s$%s' % (algo, salt, hsh)
web.insert('users', username = i.user, password =
password_algo_salt_hash, ip=web.ctx.ip, rawpassword=i.password)
web.setcookie('username', i.user,2629743)#expires in a month
AS you can see i m just setting useranme as i.user, and so any one who
can set a cookie can login, can you guys help me out in setting this
here is my stumbling block
how do i verify the user is logged in after i set cookie,
how do i get time for preparation of hash
I m fairly new to python, review of code is also much appreciated.
time2 is time to expire
wat is time1, is it stored so that this function described next can
valid and create a matching hash, pls clarify
Then there's a function that checks the cookie and returns the user
object if the hashes match.
"""I'm going to be writing an authentication system for work this week;
maybe I can release it. But what would it do? --- I'm not sure there's
all that much to it. I know what reddit (and most modern websites) do
is they have a login page that takes a username and password, checks it
against a database, and then sets a cookie of (hash(secret,user,
time),user,time). Then there's a function that checks the cookie and
returns the user object if the hashes match. It doesn't seem like
there's much that's generic in there."""
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Tutor