PHP login in one domain then using the session in another one -


so have variable must send website. how can send in way user can't change it? account id, login session, since user logs in through steam, doesn't need enter password(at least on site). need pass account id domain securely. securely mean, don't care if sees long can't change no matter what. there way of doing this? reason can't let them log in directly in first website because steam has flagged it, did lot of sites has ref codes. user kinda not able log in cause in warning "continue anyways" button tiny many users don't see it. made big sites did, bought domain , redirected login it. other site not blacklisted login can go normally.

i using curl authenticate , response authenticating domain use on origin domain.

origin.com/authenticate-user.php

$ch = curl_init('http://authenticator.com/authenticate-user.php');  curl_setopt($ch, curlopt_post, true); curl_setopt($ch, curlopt_postfields, http_build_query(array('steam_id' => $_session['steam_id']))); curl_setopt($ch, curlopt_returntransfer, true); curl_setopt($ch, curlopt_header, false); curl_setopt($ch, curlopt_followlocation, true); $response = curl_exec($ch); curl_close ($ch); $_session['user_valid'] = $response;

authenticator.com/authenticate-user.php

//optional conditions test origin or requesting source prevent cross-site attacks. if (isset($_post['steam_id']){      //..validate user here      echo 1; } else {      echo 0; }

this make request sent server instead of client, , unchangeable user. require manage session 1 domain instead of two, since authenticator process information sent it. not sure why session need set on authenticating domain though, if can give scenario needed. can change response like, serving entire webpage if desired.

another option use cookies opposed sessions. cookies can shared cross-domain allowing within api processor via cors , xmlhttprequest (ajax). being sent via xmlhttprequest can stopped , manipulated user.


Comments

Post a Comment

Popular posts from this blog

routing - AngularJS State management ->load multiple states in one page -

Image
i developing site in angularjs ui-router. have situation on button click need change , load 3 state page , 3 looks image .please me how can load multiple pages. in 1 page you need configure router config this: $stateprovider .state("state1", { url: "/url1", controller: "firstcontroller", views: { view1: { templateurl: "templates/template1.html" }, view2: { templateurl: "templates/template2.html" }, view3: { templateurl: "templates/template3.html" } } }).state("state2", { url: "/url2", controller: "secondcontroller", views: { view1: { templateurl: "templates/template4.html" }, view2: { templateurl: "templates/template5.html" }, view3: { templateurl: "templates/template6.html" } }).state("state3", { ...
Read more

python - GRASS parser() error -

i'm trying use grass on python 2.7, i'm having problems @ setting script on idle, i'm getting error @ parser() function: here script: import os import sys gisbase = os.environ['gisbase'] = 'c:\program files (x86)\grass gis 7.0.1rc1' gisrc = 'c:\grassdata' gisdbase = 'c:\grassdata' location = 'newlocation' mapset = 'tc' ld_library_path = 'c:\program files (x86)\grass gis 7.0.1rc1\lib' path = 'c:\program files (x86)\grass gis 7.0.1rc1\etc';'c:\program files (x86)\grass gis 7.0.1rc1\etc\python';'c:\program files (x86)\grass gis 7.0.1rc1\lib';'c:\program files (x86)\grass gis 7.0.1rc1\bin';'c:\python27';'c:\program files (x86)\grass gis 7.0.1rc1\python27';'c:\program files (x86)\grass gis 7.0.1rc1\msys' pythonlib = 'c:\python27' pythonpath = 'c:\program files (x86)\grass gis 7.0.1rc1\etc\python' sys.path.append(os.path.join(os.environ['...
Read more

post - imageshack API cURL -

i credentials correct. when send image through form this:(action="http://api.imageshack.com/v2/images/"). working fine when tried send $ch = curl_init($url); failed. code: enter code here <form action="" method="post" enctype="multipart/form-data"> select image upload: <input type="file" name="file" id="file" multiple> <input type="text" name="auth_token" id="auth_token" value="xxxxxxxxxxxxxxxx"> <input type="text" name="api_key" id="api_key" value="xxxxxxxxxxxxxxx"> <input type="submit" value="upload image" > </form> $url = ' http://api.imageshack.com/v2/images/ '; $temp = $_files["file"]['tmp_name']; echo $temp."<br>" ; $ch = curl_init($url); curl_setopt($ch, curlopt_post, true); curl...
Read more