Easiest way is to have some kind of uid/password protection before people
log on. Usually pass words are kept in a data base.

php and mysql are free and will do the job admirably.

Frank
----- Original Message -----
From: "WebMaster" <Webmaster(at)lchb.com>
To: <hwg-techniques(at)hwg.org>
Sent: Tuesday, September 24, 2002 12:54 PM
Subject: Site/message board security



Hi --

Not sure if this is appropriate to the list, so apologies if it's not.

I have a colleague who's starting a large new non-profit site for crime
victims. She's setting it up so that visitors can find trauma resources,
counseling and so forth, as well as government-provided help.  A central
feature of the planned site is a message board where visitors can
provide support and help to one another.

Given the nature of the site, there is great concern about security,
against the possibility of felons gaining access to valid user id info,
etc., particularly in the area of the message boards.

None of my design/site-creation work has involved these kinds of issues,
so I don't really even know where to tell her to start.  The security on
the crime victim resources site really needs to be top-notch, but being
a non-profit, they're very concerned about implementation costs.

Any info anyone can provide will be hugely appreciated. This would
include design/structure tips as well as contact information for
potential security experts who might be available to work on the site.
Actually, the latter might be even more helpful than the former....

Thanks in advance for any help and info you can provide.

John Gersten
Webmaster
Lieff Cabraser Heimann & Bernstein, LLP
275 Battery Street, Suite 3000
San Francisco, CA 94111
Tel. 415 956-1000
Fax. 415 956-1008
E-mail: webmaster(at)lchb.com



This email message is for the sole use of the intended recipient(s) and may
contain confidential and privileged information.
If you are not the intended recipient, please contact the sender by reply
email and destroy all copies of the original message.
To reply to our email administrator directly, send an email to
postmaster(at)lchb.com

Lieff Cabraser Heimann & Bernstein, LLP  http://www.lieffcabraser.com

• Web Designer Courses
• Off the Shelf Training Courses

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA