Idea to protect and limit ethernet server access


i have started home automation system mega , ethernet shield.

with kind assistance , guidance of zoomkat, have ethernet server working want it.

my concern (probably accidentally) connect served page , use served web page adjust settings home system , alarm / intruder detection system.

my thoughts prevent :

1. declare variable $passid
2. when first serving page, if $passid empty, display textbox (type = password) , submit button.
3. if server receives value password textbox, check valid ( hard coded value on server ).
4. if valid, assign current millis value $passid, , display full page (list of controls), , prepend $passid link values.
5. if link received, check $passid (in link) exists valid issued id, , id not older than, say, 5 minutes (millis + 5 min), , perform operation relevant link.
6. if textbox empty, or not valid password, or $passid older 5 minutes, re-display password textbox , submit button.

any obvious flaws or oversights ?

quote
any obvious flaws or oversights ?

sounds me. 5 minutes might bit short, though.


Arduino Forum > Using Arduino > Networking, Protocols, and Devices (Moderator: fabioc84) > Idea to protect and limit ethernet server access


arduino

Comments

Popular posts from this blog

Thread: PKI Client 5.00 install (for eToken Pro)

ATmega2560-Arduino Pin Mapping

Crossfader Arduino Tutorial