Re: OpenID
| From: | Eric Butera | Date: | Fri, 18 Jul 2008 11:50:19 +0000 |
| Subject: | Re: OpenID | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-277021@lists.php.net to get a copy of this message | ||
On Fri, Jul 18, 2008 at 2:37 AM, Per Jessen <per@computer.org> wrote:
> Kevin Waterson wrote:
>
>> This one time, at band camp, "Alex Chamberlain"
>> <php@alexchamberlain.co.uk> wrote:
>>
>>> Has anybody had any success implementing an OpenID server in PHP??
>>
>> Sure, I had mine all set up on oceania.net and then the domain got
>> stolen. So, all my OpenID info went with it.. not as good an idea as
>> it first seems.
>
> I'm curious, how does a domain "get stolen" ?
>
>
> /Per Jessen, Zürich
I saw a story where a guy had a XSS vuln on his site that allowed a
malicious user to inject a backdoor forwarding filter on his gmail
account. Then the malicious user used the guys gmail account to
transfer his domain.