bsamson Posted March 11, 2008 Share Posted March 11, 2008 Here's the situation. I run a small internal website that I have coded from scratch for my company. Right now it is IP based and stores automatically get logged in. HOWEVER, some stores don't have a static IP and it changes seemingly everyday. This site contact links that auto log the user into some pretty sensitive sites. I was curious if there is a method of storing a file on each stores computer that a script will read and validate based on that. Any help will be greatly appreciated! Thanks in advance! --Brian Link to comment https://forums.phpfreaks.com/topic/95591-logging-in-users-via-certificate/ Share on other sites More sharing options...
shocker-z Posted March 11, 2008 Share Posted March 11, 2008 being as PHP is server-side i cant see that being possible. However you could look at using hosts instead of IP? $hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']); you could strip it down to local exchange but then you still have possibility of someone getting in who shouldn't. how sencitive is the data? Regards Liam Link to comment https://forums.phpfreaks.com/topic/95591-logging-in-users-via-certificate/#findComment-489351 Share on other sites More sharing options...
bsamson Posted March 11, 2008 Author Share Posted March 11, 2008 I dont know sensitive was the right word. The links redirect the user (and auto logins) to an activation site for a wireless carrier. We like this option b/c users dont know the passwords. Is there perphaps a ceritificate of some kind that I can have php look at before loading? Or perhaps use javascript to get contents of file? I am at a loss ... because everything as of right now is wrapped around the store's ip. Thanks in advance. Link to comment https://forums.phpfreaks.com/topic/95591-logging-in-users-via-certificate/#findComment-489354 Share on other sites More sharing options...
MadTechie Posted March 11, 2008 Share Posted March 11, 2008 well the only thing i can think of would be a cookie.. you can't grab a file from te client PC.. that would be a security risk for all users on the web.. you could have them upload a file.. Link to comment https://forums.phpfreaks.com/topic/95591-logging-in-users-via-certificate/#findComment-489355 Share on other sites More sharing options...
shocker-z Posted March 11, 2008 Share Posted March 11, 2008 how about creating a few different domains? Cheap enough and would do the trick if avalible. liam Link to comment https://forums.phpfreaks.com/topic/95591-logging-in-users-via-certificate/#findComment-489369 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.