Re: Secure--different domain

[Mark Stosberg <mark@summersault.com>]

******    message to minivend-users from Mark Stosberg <mark@summersault.com>     ******


Aaron,

 as far as I can tell, the only way to pass minivend information between
two physical servers is with the method outlined below. It seems like
there would be a more elegent solution, since to  have a truly secure
server, it makes sense to have a seperate machine. Well, at least in the
case of a hosting firm where you don't want clients to have access to
the secure server. 
  I haven't actually  implemented this myself yet, but I'll need to do
it soon for a client.

 -mark
http://flip.summersault.com

-------- Original Message --------
Subject: My previous message!
Date: Fri, 15 Jan 1999 12:56:22 +0100
From: "Hans-Joachim Leidinger" <hans-joachim.leidinger@home.gelsen-net.de>
To: <mark@summersault.com>

Dear Mark,

i have found the result of my problems. See below! :-))

Thank you for your respond!

Greeting Joachim

It works great!! (Was: Re: Fetching CGI QUERY_STRING info )

Robert Barta (rho@Austria.EU.net)
Sat, 24 Jan 1998 10:22:52 +0100

     Messages sorted by: [ date ][ thread ][ subject ][ author ]
     Next message: Frank Miedreich: "Accessing info from http basic
authentication"
     Previous message: Birgitt Funk: "Maximum value for HammerLock"

****** message to minivend-users from rho@Austria.EU.net (Robert Barta)
******

Hi MVers,

Recently rho@Austria.EU.net said:
> Background: I have the requirement to "import" an external basket
> content which I receive via an CGI call from another shop. My idea was
> to have an URL as

> /cgi-bin/...../warenkorb...&item1=1234&price1=2.0&item2=....

Thanks to Mike's help of CGI GETs and mv3.05 I came up with the
following
setting in warenkorb.html:

======================================================================

## the products to import are not in my products database, not yet...
[tag flag write]products[/tag]

## for convenience (well) fetch it into scratch vars
[perl arg="cgi scratch"]
for ($i = 1; $i < 10; $i++)
{
if ($Safe{'cgi'}->{"oisbn$i"})
{
$Safe{'scratch'}->{"isbn$i"} = $Safe{'cgi'}->{"oisbn$i"};
$Safe{'scratch'}->{"onum$i"} = $Safe{'cgi'}->{"onum$i"};
$Safe{'scratch'}->{"price$i"} = $Safe{'cgi'}->{"oprice$i"};
$Safe{'scratch'}->{"title$i"} = $Safe{'cgi'}->{"otitle$i"};
}
}
"";
[/perl]

## dotate my in-memory database with the external items
[loop arg="1 2 3 4 5 6 7 8 9"]
[if scratch price[loop-code]]
[data base="products" name="Preis" code="[scratch isbn[loop-code]]"
value="[scratch price[loop-code]]"]
[data base="products" name="Titel" code="[scratch isbn[loop-code]]"
value="[scratch title[loop-code]]"]
[data base="products" name="Zusatz" code="[scratch isbn[loop-code]]"
value="[scratch isbn[loop-code]]"]
[/if]
[/loop]

## just let'em drop into the basket, the [item-list] will work without
modifications
[perl arg="carts scratch"]
$ref = $Safe{carts}->{main};
for ($i = 1; $i < 10; $i++)
{
push @$ref, {code => $Safe{'scratch'}->{"isbn$i"}, quantity =>
$Safe{'scratch'}->{"onum$i"} } if $Safe{'scratch'}->
{"onum$i"} > 0;
undef $Safe{'scratch'}->{"price$i"}; ## avoid additions in later
invocations
undef $Safe{'scratch'}->{"onum$i"};
}
"";
[/perl]

======================================================================

What I *really* like about these kind of solutions is the fact that the
author of the software (minivend in case) did not completely anticipate
this
kind of problem in the first run, but made the software open enough to
let this kind of "hack" happen.

And this is exactly what I hate about "keyready software" ala M$....

\rho

PS: mv3.05 is horribly fast on my Ultra/Slowlaris 2.6. I had to check
the
server logs to convince myself I did not surf the cache...;-)

-
To unsubscribe from the list, DO NOT REPLY to this message. Instead,
send
email with 'UNSUBSCRIBE minivend-users' in the body to
Majordomo@minivend.com.

     Next message: Frank Miedreich: "Accessing info from http basic
authentication"
     Previous message: Birgitt Funk: "Maximum value for HammerLock"
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list