NYCPHP Meetup

NYPHP.org

[nycphp-talk] Cross domain Logins

Mark Armendariz nyphp at enobrev.com
Thu Nov 20 03:14:19 EST 2003


Anyone here ever create a cross-domain login system?  I'm still waiting for
details to see if the domains will have access to the same db or same
server.  I figure one way to do it would be to somehow transfer session info
form one domain to the other, but it seems like there's plenty of security
issues in doing so.  I thought maybe passing an md5 encrypted string with
the username, password form one site to the next might work as well, but I'm
still not too sure of the security issues, especially considering the issues
pointed out a couple weeks back regarding auto-logins.
 
Anyone have experience with this?
 
Thanks!
 
Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/talk/attachments/20031120/bbe6b3d2/attachment.html>


More information about the talk mailing list