Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-08 Thread Richard Lynch
f00l wrote: > Come here to get help, not abuse > for what its worth: > sql dbase with fields > usernamepassiptime > if duplicate username/passowrd then check that IPs match and dont do > anything > if IPs <> match then kick both users off / disable username/password > > go figure the co

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-07 Thread f00l
Come here to get help, not abuse for what its worth: sql dbase with fields usernamepassiptime if duplicate username/passowrd then check that IPs match and dont do anything if IPs <> match then kick both users off / disable username/password go figure the code out yourself here is the

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Thomas Goyne
On Tue, 1 Mar 2005 13:53:32 -0700, Dan Tappin <[EMAIL PROTECTED]> wrote: You really can't prevent the shared password issue unless you billed on a per login basis. That may be one possible solution (although with my limited knowledge of the industry, I don't know how viable). Charge something

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Dan Tappin
What about using a simple session database to ensure multiple logins are not allowed. You can create a session, store the session ID in mysql. If the same user tries to login again from a different location i.e. new session ID you can lock them out / log this activity. You really can't preven

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Richard Lynch
Dan Trainor wrote: > I'm pretty aware of how it all works. However, the problem lies in the > fact that because most of the pre-installed billing software relies > solely on .htaccess/.htpasswd-based authentication, it's not possible to > just change the whole login system. For the most part, the

RE: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Mikey
> The difficulty is trying to find a solution that would limit > access and do all the fancy stuff that we had discussed, > without interfering with the pre-existing authentication > system. How about taking the auth status of a user from the headers and then performing additional verification

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Dan Trainor
Mikey wrote: To address Mikey's question - I am not looking for a way to uniquely identify users. For one, it's just not possible. On top of that, the vast majority of members with to stay anonymous for reasons that I am not even going to begin to state on this list, because we all know where

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Jochem Maas
Dan Trainor wrote: Jochem Maas wrote: ... I don't think that this is an issue that is specific to pr0n. Sure, the first thing that we think of when we hear a traded login is actually pr0n, but it is most definately not limited to this arena. does anybody know whether pr0n sites have a much highe

RE: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Mikey
> To address Mikey's question - I am not looking for a way to > uniquely identify users. For one, it's just not possible. > On top of that, the vast majority of members with to stay > anonymous for reasons that I am not even going to begin to > state on this list, because we all know where th

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Dan Trainor
Jochem Maas wrote: Hi Mikey, you writing is very balanced, nicely put... I very much agree with the position you take/have (maybe my OP didn't put it quite so clearly ;-) but you write that Dan probably agrees that (any) exploitation (that occurs) is a bad thing... a logical assumption now read

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Jochem Maas
Hi Mikey, you writing is very balanced, nicely put... I very much agree with the position you take/have (maybe my OP didn't put it quite so clearly ;-) but you write that Dan probably agrees that (any) exploitation (that occurs) is a bad thing... a logical assumption now read this a weep (it a

RE: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Mikey
[snip everything irrelevant] On a tehnical note, I don't really see how you can prevent this sharing of logins. This is something I was actually looking into for a site that had nothing to do with pr0n (would love to know where that came from, it seems so universal now). If you read up on the ge

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread Dan Trainor
AdamT wrote: On Mon, 28 Feb 2005 15:42:37 -0800 (PST), Richard Lynch <[EMAIL PROTECTED]> wrote: I know absolutely nothing about how ProxyPass, iProtect, and PureMember work 'Pure'member seems such an odd choice of name for something used on pr0n sites. This product is not marketed exclusively for

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-03-01 Thread AdamT
On Mon, 28 Feb 2005 15:42:37 -0800 (PST), Richard Lynch <[EMAIL PROTECTED]> wrote: > I know absolutely nothing about how ProxyPass, iProtect, and PureMember > work 'Pure'member seems such an odd choice of name for something used on pr0n sites. -- AdamT "Justify my text? I'm sorry, but it has n

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread Comm23A
On 28 Feb 2005 dan wrote: > Go ahead and look at my first email. For some reason you didn't get the > idea that I was looking for solutions. Ideas. I wasn't looking for > anything solid. It really wasn't so clear what you were looking for. It is to you, but not necessarily to the reader.

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread dan
Richard Lynch wrote: Dan Trainor wrote: I'm not quite sure why you chose the PHP community as a recipient -- There are quite a few Apache modules out there. And Modules such as mod_auth_mysql and mod_auth_ldap (?) and, really, any old mod_auth_XYZ module would be a closer "match" for what you want,

Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread Richard Lynch
Dan Trainor wrote: I'm not quite sure why you chose the PHP community as a recipient -- There are quite a few Apache modules out there. And Modules such as mod_auth_mysql and mod_auth_ldap (?) and, really, any old mod_auth_XYZ module would be a closer "match" for what you want, I think. I know a

Re: [PHP] Re: [MondayMorningRant] Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread Robert Cummings
On Mon, 2005-02-28 at 14:37, dan wrote: > Well I'll be God Damned. You're pretty clever. You're surly going to > Heaven, now! Oh no, he'll surely terrorize all of heaven with his surliness ;) Cheers, Rob. -- .. | InterJinn Applicatio

[PHP] Re: [MondayMorningRant] Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread dan
Jochem Maas wrote: if you any of the following might apply to you, please hit delete now: 1. easily offended. 2. think this email _needs_ a reply. 3. no sense of humour. 4. can't accept that humour varies from person to person. thanks, that will save alot of heart-ache and bandwidth... LETS RANT BA

[PHP] [MondayMorningRant] Re: [PHP] Semi-OT: Anti-password trading/sharing solutions

2005-02-28 Thread Jochem Maas
if you any of the following might apply to you, please hit delete now: 1. easily offended. 2. think this email _needs_ a reply. 3. no sense of humour. 4. can't accept that humour varies from person to person. thanks, that will save alot of heart-ache and bandwidth... LETS RANT BABY :-) Dan Trainor