Mailing-List: contact modperl-help@perl.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: domain of pharkins@gmail.com designates
 209.85.146.180 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references:x-google-sender-auth;
        b=xqHw2CJq8x7+64BEOP/EQRABwRQ3Fg7IriwAwEirGIWETpvyLxh3LsC3wcZqpqyzTP
         NOf22YJwBJmB87MneIn9odaDNkHlGnyEhGZy9gYeA54xs6+t1ve1p/YErCAYQyRoUtDa
         9udjhI3JZU8JgBCKXq/TMfN6NSWgXMidhQ8vg=
Message-ID: <66887a3d0806261113o693bab6blc2281c9acbc2ea8a@mail.gmail.com>
Date: Thu, 26 Jun 2008 14:13:38 -0400
From: "Perrin Harkins" <perrin@elem.com>
Sender: pharkins@gmail.com
To: "Aaron Collins" <collinsa@ehawaii.gov>
Subject: Re: mod_captcha
Cc: modperl@perl.apache.org
In-Reply-To: <4862E0A3.50603@ehawaii.gov>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <4862E0A3.50603@ehawaii.gov>

On Wed, Jun 25, 2008 at 8:19 PM, Aaron Collins <collinsa@ehawaii.gov> wrote:
>  I'm trying to write a perl based mod_captcha using the recaptcha service, I
> was wondering is someone could tell me which handler I should use that would
> allow me to have mod_perl intercept a request going to a specific location
> and if it i return true continue with the request.  In my case I use
> ProxyPass to pass request to java.  So I'd want to have my handler jump in
> give a captcha and when the captcha is approved continue forwarding it on to
> the proxypass.  If my understanding of mod_perl is incorrect please let me
> know if their is a better logic to approach this.

You can't do all that within a single HTTP request.  What you need to
do is check if the person is authorized already (usually through a
cookie), and if not, redirect them to your captcha application.  When
they pass the captcha, you give them a cookie that identifies them,
and that cookie allows them in to the protected area.

Rather than write this all yourself, I suggest you subclass Apache::AuthTicket.

- Perrin


>
> --
> -Aaron Collins
> Systems Engineer/ Release Engineer
> Hawaii Information Consortium
> 220 S. King St. Suite 2190
> Honolulu, Hawaii 96813
> Cell: 808.203.8756
> Office: 808.587.4213
>
> ************************************************************
> CONFIDENTIALITY NOTICE:
> This email and any attachments are confidential.  If you
> are not the intended recipient, you do not have permission
> to disclose, copy, distribute, or open any attachments.  If
> you have received this email in error, please notify us
> immediately by returning it to the sender and delete this
> copy from your system.
> ************************************************************
>
>