web-security methods, advice please!

[rob-3Aypa9sX/B7wvR0lvYjcXw at public.gmane.org]

>
> I do agree though that using my own code isn't ideal, for exactly the
> reasons you mentioned. Perhaps there is some more tested canned code I
> could use?

I wonder if it might be worth your while to locate similar packages to yours
and look at their approaches/discussions? You said it was a CRM app,
right? Maybe taking a close look at the security methods used by SugarCRM
or a similar package that's been in the wild for a while would help. Of
course,
this has probably occurred to you :-)

Rob

--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists