Re: [Gnumed-devel] choice of web frameworks

[lkcl]

Sebastian Hilbert wrote:
> 
> Am Montag 12 Juli 2010, 20:11:34 schrieb lkcl:
> My thoughts were like this. Couldn't one connect to the database with the 
> credentials supplied (kind of global=personal)? If the connection is 
> successful check for the cookie.
> 

 ... but... the whole point is that "successful check for the cookie"
usually requires some sort of database connection, because usually the link
between session cookie and user credentials is stored in a SQL database.

 and remember that on each and every single HTTP request, you have _no_ idea
who they are (except via that cookie).

 so, yah, you _could_ use some random person's credentials to connect to the
database, just to get to the table storing the link between cookies and the
_real_ credentials but that's like.. eughh.

 and what happens when there is nobody logged in??  which credentials do you
use then?? because there aren't any!!

 it's a complete nightmare, one _entirely_ of your own making :)

 fortunately i'm done already with the cooperative multitasking http server.

l.
-- 
View this message in context: 
http://old.nabble.com/Re%3A--Gnumed-devel--choice-of-web-frameworks-tp29137242p29144870.html
Sent from the GnuMed - Dev mailing list archive at Nabble.com.