samtay Posted July 3, 2007 Share Posted July 3, 2007 Hey Everyone, Can anyone give me any help on one-login multi-site User authentication system. The problem I have is that it uses the same site but it will have number of different domains. Depending on which domain is used to access the site will change how the site will function. Cheers, Sam Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/ Share on other sites More sharing options...
Salis Posted July 3, 2007 Share Posted July 3, 2007 Maybe a database table? That's what I'd do. But my 2 sites are on the same account. One's a primary domain and the other is parked so I have access to the same databases. Not sure if you have yours set up the same way. Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288789 Share on other sites More sharing options...
podja Posted July 3, 2007 Share Posted July 3, 2007 You can access databases remotely I think. There is an option in the new cPanel Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288797 Share on other sites More sharing options...
samtay Posted July 3, 2007 Author Share Posted July 3, 2007 Maybe a database table? I was thinking of that but wouldn't that mean the user would have to login each visit and when they would go to the other domain. If I'm correct it is only possible to access cookies in the domian that the user is using; the reason I would be using cookies because I only want the user to login once and possible not again. That's what I'd do. But my 2 sites are on the same account. One's a primary domain and the other is parked so I have access to the same databases. Not sure if you have yours set up the same way. Well my apache is set up to catch all request on a definded IP, then the PHP application works out where the user wants to be. For example: A user will access the server using www.example.com and will get our main site, then another user will access the server using www.ourclient.com and will get our clients CMS. The reason for the PHP application working out what the user would like is to make it more automated, each CMS would be using the same code with the same database and it would be easier to update and manager. The users would have to be loged in to do some task such as to post a comment, this would go for both our main and clients site but I would only want the user to log in once. You can access databases remotely I think. There is an option in the new cPanel I'm not using cPanel, I manage my own VPS so I can have full control. Hope this explain what I want better, Cheers for the replys. Sam Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288819 Share on other sites More sharing options...
samtay Posted July 3, 2007 Author Share Posted July 3, 2007 Just wanted to add that there is another post on this forum related to this topic but not been solved. http://www.phpfreaks.com/forums/index.php/topic,147847.0.html Cheers Sam Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288828 Share on other sites More sharing options...
per1os Posted July 3, 2007 Share Posted July 3, 2007 I do know there was something called Brownies back in the day that was suppose to but I do not think it ever went anywhere due to restrictions. I forget how .NET sign in system works, I think it uses API technology. I have heard of people using images, which the image is a file hosted on the remote site which has backend php code, the username/password is passed as a hash (which is a two way hash meaning it can be decrypted with a secret key) through this image and is validated and the cookie set on the remote site for the user. I am unsure of the security risks, but I would set a timestamp in the hash with the username and password and if the timestamp is more than 15 seconds old the hash is invalid to prevent snooping attempts. But other than that I am not sure, I have not tested what I described above because I have yet to have a need for it. Good luck. Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288860 Share on other sites More sharing options...
samtay Posted July 3, 2007 Author Share Posted July 3, 2007 I do know there was something called Brownies back in the day that was suppose to but I do not think it ever went anywhere due to restrictions. I forget how .NET sign in system works, I think it uses API technology. I have heard of people using images, which the image is a file hosted on the remote site which has backend php code, the username/password is passed as a hash (which is a two way hash meaning it can be decrypted with a secret key) through this image and is validated and the cookie set on the remote site for the user. I am unsure of the security risks, but I would set a timestamp in the hash with the username and password and if the timestamp is more than 15 seconds old the hash is invalid to prevent snooping attempts. But other than that I am not sure, I have not tested what I described above because I have yet to have a need for it. Good luck. Sounds good! Anyone know of any examples? Cheers Sam Link to comment https://forums.phpfreaks.com/topic/58234-multi-site-login/#findComment-288939 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.