Re: RADIUS 2.0 Source? COME AND GET IT! (fwd)

MegaZone (megazone@livingston.com)
Mon, 4 Nov 1996 17:12:13 -0800 (PST)

Once upon a time David Denney shaped the electrons to say...
>Why not just have a access restricted page that the cgi
>gets you to after authentication (using a cookie?)
>where there is a link to click on to download the file?

You answered your own question - you need to maintain state to be sure
that the users have seen the form and agreed to the license. The most
effective way to do that is cookies. Doing them is no problem, I have the
Perl done already because that is how the store works (don't ask, it was
put on hold at the request of sales/mkt).

The problem is two fold:
1. Only a few browsers support cookies today. It was/n an easy decision
using them on the store, but after looking at alternatives it was the
cleanest way to do it. With this, it wasn't.
2. Using cookies also makes things more complex. Having some kind of
tracking, comparision, etc.
3. You would have to make a copy of the original file for each user, and
run a cron job to delete them. Just giving out the URL for one file would
mean anyone could give it to other people and circumvent it. Also, there
would be a period where they could still do it by immediately sharing the
URL.

What it came down to was - providing more people access (A number of people
are using Lynx to get it, I'm tracking user agents just to see) and keeping
the code simple.

-MZ

--
Livingston Enterprises - Chair, Department of Interstitial Affairs
Phone: 800-458-9966 510-426-0770 FAX: 510-426-8951 megazone@livingston.com
For support requests: support@livingston.com  <http://www.livingston.com/> 
Snail mail: 6920 Koll Center Parkway  #220, Pleasanton, CA 94566