Idea to protect and limit ethernet server access
i have started home automation system mega , ethernet shield.
with kind assistance , guidance of zoomkat, have ethernet server working want it.
my concern (probably accidentally) connect served page , use served web page adjust settings home system , alarm / intruder detection system.
my thoughts prevent :
1. declare variable $passid
2. when first serving page, if $passid empty, display textbox (type = password) , submit button.
3. if server receives value password textbox, check valid ( hard coded value on server ).
4. if valid, assign current millis value $passid, , display full page (list of controls), , prepend $passid link values.
5. if link received, check $passid (in link) exists valid issued id, , id not older than, say, 5 minutes (millis + 5 min), , perform operation relevant link.
6. if textbox empty, or not valid password, or $passid older 5 minutes, re-display password textbox , submit button.
any obvious flaws or oversights ?
with kind assistance , guidance of zoomkat, have ethernet server working want it.
my concern (probably accidentally) connect served page , use served web page adjust settings home system , alarm / intruder detection system.
my thoughts prevent :
1. declare variable $passid
2. when first serving page, if $passid empty, display textbox (type = password) , submit button.
3. if server receives value password textbox, check valid ( hard coded value on server ).
4. if valid, assign current millis value $passid, , display full page (list of controls), , prepend $passid link values.
5. if link received, check $passid (in link) exists valid issued id, , id not older than, say, 5 minutes (millis + 5 min), , perform operation relevant link.
6. if textbox empty, or not valid password, or $passid older 5 minutes, re-display password textbox , submit button.
any obvious flaws or oversights ?
quote
any obvious flaws or oversights ?
sounds me. 5 minutes might bit short, though.
Arduino Forum > Using Arduino > Networking, Protocols, and Devices (Moderator: fabioc84) > Idea to protect and limit ethernet server access
arduino
Comments
Post a Comment