Password protection system for web app

Peter Hansen peter at engcorp.com
Tue Oct 14 10:13:08 EDT 2003


Jegenye 2001 Bt wrote:
> 
> Could someone please suggest a very lightweight solution for protecting
> directories on a web server? (membership system)
> 
> The job is basically this:
> An administrator, after logging in via the web, should have the ability to
> add/remove users who then could access their own password protected
> directories only with their
> browsers.

That doesn't help.  What is *in* these directories?  Or do you mean
to use the term in the sense of "folder of files"?  

More importantly: how much do you want to protect the contents from
prying eyes?  Is this on a local network, and therefore considered 
secure from hackers (disregarding the fact that this is never the case)?
Does it need to encrypt data going across the web?  After all, 
without encryption (and therefore SSL/HTTPS) dozens of people could
intercept your data and read it or the passwords.

Or is the data and application almost totally unimportant, and all
you are trying to do is prevent casual/accidental misuse of one
person's account by another?

-Peter




More information about the Python-list mailing list