Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #7915

Re: Strategy to Verify Python Program is POST'ing to a web server.

Path csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!news.albasani.net!news2.arglkargh.de!news.wiretrip.org!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path <mhrivnak@gmail.com>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.008
X-Spam-Evidence '*H*': 0.98; '*S*': 0.00; 'onto': 0.05; 'statistical': 0.05; 'subject:Python': 0.06; 'python': 0.08; 'folks,': 0.09; 'solution,': 0.09; 'thrown': 0.09; 'am,': 0.14; 'wrote:': 0.14; 'subject:server.': 0.16; 'uploading': 0.16; 'cc:addr:python-list': 0.17; 'header:In-Reply-To:1': 0.21; 'cc:2**0': 0.22; 'cc:no real name:2**0': 0.23; 'ensuring': 0.23; 'url:mailman': 0.26; 'sender:addr:gmail.com': 0.28; 'wondering': 0.28; 'message-id:@mail.gmail.com': 0.28; 'remote': 0.28; 'thanks': 0.28; 'sat,': 0.29; 'subject:web': 0.29; 'server': 0.29; 'cc:addr:python.org': 0.30; 'url:listinfo': 0.30; 'received:209.85.215': 0.30; 'received:209.85.215.46': 0.30; 'received:mail-ew0-f46.google.com': 0.30; 'sort': 0.31; 'michael': 0.32; 'someone': 0.33; 'post': 0.33; 'page.': 0.33; 'example,': 0.35; 'there': 0.35; 'ssl': 0.35; 'using': 0.35; 'program,': 0.37; 'received:google.com': 0.37; 'received:209.85': 0.37; 'case': 0.37; 'url:python': 0.38; 'url:org': 0.38; 'data': 0.38; 'subject:: ': 0.38; 'some': 0.38; 'should': 0.39; 'client': 0.39; 'received:209': 0.39; 'submitting': 0.40; 'best': 0.60; 'your': 0.60; 'website': 0.66; 'strategies': 0.78; 'subject:Verify': 0.84; 'tracks': 0.91
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=imxR0VQoeAqRI3x1GGUzq9z2oAGu8qn6SbQjR0a6qcc=; b=rH7sb6IXu+x9lbd8+aSkstoTfcUWHha4jTSD+CruMgR1FK+ieD8VNmRccxgzN8SAjy WeyReoIfgHzSZzJqmWJQ/DnY2GgSpAEoZGuiBxacRG7qiAqvDh34+vNWtMHDRmcKdl/E dNNHZJYq6x5oqVdeXIguXL2RFPy8u7diTSGxw=
DomainKey-Signature a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=aKZxINiufvzZCMOJJPx08IR0W6KlKFVe/dySmxb10Ry1G4GTuQapJjQMjZJbMga2/c FJ74ISW56UpRGNH9wXGSI2I8daOJouyciT+pFLJA2zMtB3L0k3VAHou30MeyDt5ix1dO g7CsslFEQNJimQ4/6xAtiPfEZwmxf0svIzREI=
MIME-Version 1.0
Sender mhrivnak@gmail.com
In-Reply-To <d8c7dc52-0c54-4b29-a7b6-bcd833686611@q12g2000prb.googlegroups.com>
References <d8c7dc52-0c54-4b29-a7b6-bcd833686611@q12g2000prb.googlegroups.com>
Date Sat, 18 Jun 2011 13:05:19 -0400
X-Google-Sender-Auth IeKA9Ip5HT_KjfE_nYDFRw2XCKQ
Subject Re: Strategy to Verify Python Program is POST'ing to a web server.
From Michael Hrivnak <mhrivnak@hrivnak.org>
To "mzagursk@gmail.com" <mzagursk@gmail.com>
Content-Type text/plain; charset=ISO-8859-1
Content-Transfer-Encoding quoted-printable
Cc python-list@python.org
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.12
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.125.1308416728.1164.python-list@python.org> (permalink)
Lines 27
NNTP-Posting-Host 82.94.164.166
X-Trace 1308416728 news.xs4all.nl 49044 [::ffff:82.94.164.166]:45410
X-Complaints-To abuse@xs4all.nl
Xref x330-a1.tempe.blueboxinc.net comp.lang.python:7915

Show key headers only | View raw


Authentication by client SSL certificate is best.

You should also look into restricting access on the server side by IP address.

Michael

On Sat, Jun 18, 2011 at 7:34 AM, mzagursk@gmail.com <mzagursk@gmail.com> wrote:
> Hello Folks,
>
> I am wondering what your strategies are for ensuring that data
> transmitted to a website via a python program is indeed from that
> program, and not from someone submitting POST data using some other
> means.  I find it likely that there is no solution, in which case what
> is the best solution for sending data to a remote server from a python
> program and ensuring that it is from that program?
>
> For example, if I create a website that tracks some sort of
> statistical information and don't ensure that my program is the one
> that is uploading it, the statistics can be thrown off by people
> entering false POST data onto the data upload page.  Any remedy?
>
> Thanks
> --
> http://mail.python.org/mailman/listinfo/python-list
>

Back to comp.lang.python | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Strategy to Verify Python Program is POST'ing to a web server. "mzagursk@gmail.com" <mzagursk@gmail.com> - 2011-06-18 04:34 -0700
  Re: Strategy to Verify Python Program is POST'ing to a web server. Eden Kirin <eden@bicikl.> - 2011-06-18 14:32 +0200
  Re: Strategy to Verify Python Program is POST'ing to a web server. Michael Hrivnak <mhrivnak@hrivnak.org> - 2011-06-18 13:05 -0400
  Re: Strategy to Verify Python Program is POST'ing to a web server. Chris Angelico <rosuav@gmail.com> - 2011-06-19 03:26 +1000
  Re: Strategy to Verify Python Program is POST'ing to a web server. Tim Roberts <timr@probo.com> - 2011-06-18 12:37 -0700
  Re: Strategy to Verify Python Program is POST'ing to a web server. Michael Hrivnak <mhrivnak@hrivnak.org> - 2011-06-18 16:40 -0400
    Re: Strategy to Verify Python Program is POST'ing to a web server. Gregory Ewing <greg.ewing@canterbury.ac.nz> - 2011-06-19 12:38 +1200
      Re: Strategy to Verify Python Program is POST'ing to a web server. Chris Angelico <rosuav@gmail.com> - 2011-06-19 10:54 +1000
  Re: Strategy to Verify Python Program is POST'ing to a web server. Paul Rubin <no.email@nospam.invalid> - 2011-06-18 14:03 -0700
  Re: Strategy to Verify Python Program is POST'ing to a web server. Terry Reedy <tjreedy@udel.edu> - 2011-06-18 17:17 -0400
  Re: Strategy to Verify Python Program is POST'ing to a web server. Chris Angelico <rosuav@gmail.com> - 2011-06-19 09:12 +1000
  Re: Strategy to Verify Python Program is POST'ing to a web server. Nobody <nobody@nowhere.com> - 2011-06-19 05:47 +0100
    Re: Strategy to Verify Python Program is POST'ing to a web server. Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2011-06-19 12:03 +0000
      Re: Strategy to Verify Python Program is POST'ing to a web server. Paul Rubin <no.email@nospam.invalid> - 2011-06-19 05:18 -0700

csiph-web