 |  |
Avi Freedman wrote:
Re: Web stuff
From: Shawn Hogan
Date: Saturday, February 6, 1999
Time: 3:15:45 pm
>OK, a few things, looking at the web stuff.
>
>(1) I'd like people to be able to review statements (and, eventually,
> invoices outstanding) by entering a password on the web page. Then,
> that username/password combination would be authenticated externally.
> I can make a program you call externally on the command line, which
> returns or prints whatever you want on success, which actually queries
> a remote radius server.
Well, you can do that already (at least the statement/invoices part).
As for the external authentication portion... I'm thinking that it would
probably be a bad idea, as you just open yourself up to a potential
security problem. Basically what you would have to do is allow Optigold
ISP to return data from the database without authenticating within
Optigold itself... So basically a trust relationship of some sort would
have to be established, and the database would be allowed to return stuff
from the database based solely on login (and not password).
To be honest, I think that it would be a much better idea to write a
custom login/password form that in turn triggers the results page of
Optigold ISP. Although, now that I think about it, you would still need
the password in Optigold ISP.
Okay, well... I'm not going to open it up for authentication externally,
but if you read-up on CDML you would be able to do it yourself... {shrug}
(I'll help ya a bit also, but I don't have the time to spend doing it
for you...) :-)
>(2) I want to change the messages on the add forms to say "someone will
> call you back within 24 hours to activate your account". And, if
> possible, for any monthly-paying accounts, to automatically prorate
> the first invoice. However, this is not a big deal, since I can just
> have staff create the invoice (I saw the option to not automagically
> invoice/ccd-authorize).
The whole web interface can be changed (it's just a bunch of text
files)... That add forms are:
add.html (login/password selection)
addform1.txt (primary account info)
addform2.txt (miscellaneous info)
addform3.txt (service selection)
adddone.txt (completed/confirmation screen)
- Shawn
-------------------------------
Shawn D. Hogan
President, Data Point Solutions
http://www.data-point.com
(619) 452-3696
ICQ: 8319647
Messages In This Thread:
Return to Digital Point Solutions' Home Page