Re: pass variable from vbscript to php

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please address replies to the list
--- Rory Browne <rory.browne@xxxxxxxxx> wrote:
> I'm not sure how you'd go about this from a security
> point of view,
> but perhaps for an Intranet, you could, check their
> IP address from
> $_SERVER['REMOTE_ADDR'], and check your login server
> to see who is
> logged in from that IP.
> 
> Perhaps considering that you seem to have a way of
> providing such
> information to the Browser, you could use cookies.
> For your clientside
> code you could do something like the following:
> 
> Bare in mind that I don't really know vbs, and the
> usual disclaimers apply.
> <script type="text/vbscript">
>        for each tree in NWSess1.ConnectedTrees
>                anyTree=tree.FullName
>                anyUser=NWSess1.LoginName(anyTree)
>                document.cookie="userid=" + anyUser +
> ";" + document.cookie
>        next
> </script>
> 
> You can then get the information then in PHP using
> $_COOKIE['userid'].
> I wouldn't normally advocate such a solution, you're
> relying on the
> user to tell you their name, and to tell you it
> accurately. You are
> assuming that they can't change document.cookie to
> userid=somebody_elses_name. That assumption only
> holds true if the
> person in question doesn't know how to use a
> browser.
> 
> The situation you're describing suggests a strong
> lack of security. 
> 
> On Apr 5, 2005 1:28 PM, David Bevan
> <listes@xxxxxxxxxx> wrote:
> > Another way you can get around passing info to the
> > server is to use hidden fields and make the entire
> > page into a form with each link in turn submitting
> the
> > form to the target script.  You avoid putting
> > sensitive info into the address bar and you can
> take
> > advantage of header encryption if you need it.
> > 
> > Regards,
> > David
> > 
> > --- Ashley <afogleman@xxxxxxxxxxx> wrote:
> > > I have a unique problem that may be able to be
> > > solved another way, but I
> > > don't know how.
> > >
> > > What I need to do is pass a variable from a
> vbscript
> > > into php for use.
> > >
> > > I am using vbscript to access an activeX control
> on
> > > the computer that
> > > grabs the currently logged in user.  This works
> > > fine, but I cannot
> > > determine how I can get that value into php so
> that
> > > I can use it.
> > >
> > > This is for an Intranet app.  Basically I want
> to
> > > use the currently
> > > logged in user so that they don't have to log
> into
> > > the Intranet app.
> > >
> > > I am running this on a Netware 6.5 server
> running
> > > Apache 2.5.
> > >
> > > This may not be the best way to go about this,
> but
> > > it is the only thing
> > > that I have been able to find so I am open to
> > > suggestions.
> > >
> > > Thanks in advance,
> > > Ashley
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit:
> http://www.php.net/unsub.php
> > >
> > >
> > 
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, visit:
> http://www.php.net/unsub.php
> > 
> >
> 

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux