Using Perl and encryption to validate a form entry

[widevision7]

I have a web site that I need to build for a contest.

A person goes to the web site, and enters a two-digit number six times - as in a safe combination. Example - 25-98-46-73-88-02

They would then hit submit, and the Perl script would check their guess against the real combination. If it matches, then they are a winner (they will win a car).

I can create a script to check the submission, but I don't know how to encrypt the winning combination so that someone can't hack into the web site and/or Perl code to figure out the combination.

Any suggestions would be appreciated.

Thanks,

Tony

[miller]

As long as the verification is being done server side in the perl script, then there is no need to encrypt the special code.

If you want to encrypt people's entries, then you'll need to use SSL.

I would suggest that you create some method of sessions though. There needs to be some implementation that limits someone from just creating a script that would go through all the possible combinations, probably overloading your server with submits. Sessions could be tied to both a verified email address and an ip address for example.

- Miller

[KevinADC]

You should store the winning combo in a database, not in your perl script or a plain text file.

You should probably check the laws regarding lotteries/give-aways like this, they are generally well regulated when the prize is worth more than a few dollars. The law may stipulate something about how the winning "code" in a contest of chance must be stored for future validation and proof that the contest was not rigged or someone cheated.

[widevision7]

Thanks for the tips.

I am doing this for a client who is a licensed insurance/promotions company. I actually won't be the one giving the car away - it will be General Motors...

Thanks.