[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: AOL type signup



You would have to do a good chunk of programming to pull something like that
off.  You would have to create a "new user" account whose shell would be the
main program.  That program would decide if the "AOL" crap was valid or not
and then proceed to make a new user account.  You can put any logging or
accounting stuff in there that you want.  You can do this in either perl or
C.  The other major part of it is creating a windoze gui for the people to
put in their "AOL"-eeze new user name, phone, credit card #, etc.  The gui
would talk to your box and log in as "new user" and proceed to interact with
the user creation program.  Keep in mind that people will be feeding total
garbage into this thing to try to break it.  It'll need to trap ALL non
alphanumeric characters and not puke over them.  You will have some smart
ass out there log directly into it and try to get a shell by firing control
codes and high ascii at it and by overflowing every buffer in the program.  

For a little more effort you can write a full fledged daemon to take the
requests.  That would be more secure and let you use proprietary encoded
binary transmission so that not just any yahoo can telnet to the port and
have fun.  But once you get into this, you'll realize just how much work
you're biting off.

At 02:27 PM 1/25/01 -0600, StarDrifter wrote:
>Hello,
>I was wondering if there would be a way to have a user to sign up for my ISP
>using an initial logon in the format of AOL's username and password, such
>as:
>
>6P-9224-5150
>GLAD-CARHOP
>
>and then when they logon they can change their username and password, just
>for that 1st time. After that they have to contact customer support.
>
>Also, When the user changes his/her username and password it will record
>that in a log and will be displayed at the end of the day.


+-------------------------------------------------------------------+
|     -=Close election, huh.=-                                      |
+???????????????????????????????????????????????????????????????????+

00000100



Reply to: