Click to See Complete Forum and Search --> : skip Username & password page to get direct Login
neophytech.com
10-30-2010, 03:26 AM
I want to link a website's login page with my website. I want to save the User-name & password of the login of that website so that by one click I can directly access the member's login area by hiding the user-name & Password page. please help me out in this aspect.
thanks,
With Warm Regards,
D. Misra
___________________________________________________________________
Neophytech:
Chandannagar, West Bengal, India
WebJoel
11-03-2010, 04:52 PM
Gee ...I can only think of illegal reasons why one would want to do something like this. :(
eval(BadCode)
11-21-2010, 03:38 AM
For any legit reason you would do this, you would use a central authentication server/system.
Kerberos is king. There are alternatives for web applications only like PHP CAS.
The authentication is done outside of the application space.
The applications communicate with the central authentication server using tokens and the session authenticating the user is kept between the user and the central authentication server. The application has to trust the authentication server to tell it who people are. Authorization is done inside the application space, this way applications have discretion over authorized users.
Ofcourse none of this will work if the website you're helping them log into doesn't know who you are, because tokens can be served up to anyone, and you may not reuse the token, so any attempt to forge a token would be a complete waste of time.