0

I am currently using a small PHP backend to manage a website and recently I added another functionality via a separate script. This script also requires a log in and my client finds it tedious and bothersome to have two different log on's. Therefore, I was wondering if it possible to create a script or otherwise that could possibly auto login him into the secondary script when a link is clicked (this one would be available via a menu in the original backend).

Otherwise what are my options? How hard would it be to change the authentication of script 1 to fit script 2?

Thank you.

user1185910
  • 41
  • 4
  • why would you need another login for a separate functionality? it's like having a separate login for every page! research more on "creating sessions" for a site-wide login. that way, you don't need to login everytime – Joseph Mar 04 '12 at 07:52

3 Answers3

1

You have a few options.

1) Autolog him in using his stored login credentials with a simulated web-browser script, but no website does this.

2) More elegantly, use cookies and sessions. With his correct log-in, create a unique session ID (long enough to be computationally hard to replicate in that time session) that expires after x-time limit or deleted on him logging-out. This session ID will be stored in a separate file on the server (database ideally for speed) that you check with the cookie (that you set on his initial login and which also wrote the file on the server) on each page that requires a user logged in. (You check the cookie, compare it to the session id, when it checks out serve the page, else fail).

That's it, simple.

SinisterRainbow
  • 146
  • 8
0

You will need this.

http://simplesamlphp.org/
I solved this problem by passing parameter from site1 logged in user when they access script page of site2.

Rizwan Mumtaz
  • 3,875
  • 2
  • 30
  • 31
0

If you are using $_SESSION variables then there will be no need for any auto log on as this is a global variable and will recognize the user as long as the script is in the same website/domain.

jmishra
  • 2,086
  • 2
  • 24
  • 38