Re: Re: Central authentication for multiple sites
| From: | Marek Kilimajer | Date: | Mon, 29 Sep 2003 20:20:09 +0000 |
| Subject: | Re: Re: Central authentication for multiple sites | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-164299@lists.php.net to get a copy of this message | ||
Fraser Campbell wrote:
Got it. How about this: - every login form sets a session ID - immediately after logging in the user is directed to a page showing that successful login has occurred. The result screen could could have some images (or whatever) such as this:This would not work for me because I set up my browser to not accept images from other domains (mostly ad banners). You can use it but you should still pass the session id in links that point to the other domains.<img src="http://www.otherdomain.com/img/auth.gif?session=2345r8hrfd">- above example of gif would actually be a script that returns a tiny (invisible) gif which verifies that the session is valid and sends a cookie for the new domain if it is. There would be one such embedded image for each extra domain. I've been out of web development for a while so it took me a bit to get my head around this requirement. Does my explanation make sense and seem feasible? Thanks
![http://www.otherdomain.com/img/auth.gif?session=2345r8hrfd"](http://www.otherdomain.com/img/auth.gif?session=2345r8hrfd"){kind=link}