Re: Re: Central authentication for multiple sites

On Monday 29 September 2003 15:58, you wrote: > Like someone else mentioned, use sessions or something like them. The key > is you're passing a unique id around for each person that logs in. When > they go to another site, this ID must go with them, so that means they can > only get to the other sites through a link or a form where the ID is > passed. If they simply type in the URL for the next domain, they will not > be logged in because the ID is not getting passed. Got it. How about this: - every login form sets a session ID - immediately after logging in the user is directed to a page showing that successful login has occurred. The result screen could could have some images (or whatever) such as this: <img src="http://www.otherdomain.com/img/auth.gif?session=2345r8hrfd"> - above example of gif would actually be a script that returns a tiny (invisible) gif which verifies that the session is valid and sends a cookie for the new domain if it is. There would be one such embedded image for each extra domain. I've been out of web development for a while so it took me a bit to get my head around this requirement. Does my explanation make sense and seem feasible? Thanks -- Fraser Campbell <fraser@wehave.net> http://www.wehave.net/ Halton Hills, Ontario, Canada Debian GNU/Linux