Linux, Apache, MySQL, PHP

Re: I need help with this simple form intergration.

9-Jan-12 9:42

You need to trigger it off of either the javascript events onblur, onkeyup or onkeydown and then use a ajax message to a serverside script to query google and then return the results to you page....or you can google, "on how to add a google search to your site", maybe "with autcomplete" as an additional search parameter.

Chris J
www.redash.org

Kevin Schaefer10-Jan-12 14:56

Kevin Schaefer

10-Jan-12 14:56

Do you really want asyncronous results? If not, you can just handle the POSTed data back to the script...something like:

PHP

if(isset($_POST['search']))
{
    //do something with the search here
}
else
{
    //print the search form since nothing's been submitted yet.
}

Of course using AJAX would be pretty nifty Smile | :)

Re: I need help with this simple form intergration.

cjoki11-Jan-12 7:27

11-Jan-12 7:27

I should add that jquery can make the whole ajax thing much easier to do.

Chris J
www.redash.org

partner site login

AndyInUK9-Jan-12 5:11

AndyInUK

9-Jan-12 5:11

We have a partner site, so any member from that site when clicks on a link to our site should be automatically logged inn.

what is the best possible solution for this?

using web services or query string or any other approach?

User 17164929-Jan-12 7:42

User 1716492

9-Jan-12 7:42

Don't do it. Automated logon with a website is potentially dangerous to the integrity of your company data and to your company's reputation if such a security hole becomes common knowledge.

Tell them why ...

"Security, security and security"

But if they insist, get something in writing so instructing you so that at some future time you got something to fall back on when the website and no doubt the underlying databases gets hacked/corrupted/etc

modified 1-Aug-19 21:02pm.

cjoki9-Jan-12 9:37

9-Jan-12 9:37

As Richard wrote, this is very risky. Are you 100% certain that the partner site is dogged about security?

You may want to consult a IT Security Pro that has a lot of internet communication experience. The specifics of two sites sharing a common login is not good to have in a public forum.

Chris J
www.redash.org

Mohibur Rashid9-Jan-12 22:37

Mohibur Rashid

9-Jan-12 22:37

Already two expert says it vulnerable and it is 100% true, But Yet here is a solution:

1. When User send a request first verify the user and confirm that the user is valid.
2. if valid then create a socket communication to the other server in port 80 or whatever you have chosen, then create the proper header for the other Server and send a login request to that server.
3. The other server will validate the request and send the data as usual. if success you will get a reply through the socket. Receive all data including the cookies.
4. Extract the session parameter from the cookie. save the cookie in your current server.
5. When user would click any link that forward to the other server then do not create direct link.
first send it to any local php file. In that file first set header value with cookie and then using herader location redirect it to the other server.

Perhaps you can save the retrieved session in uri of the forwarded link and then you would have to add a small process to restore session from external variable which I described in this link[^].

Even though two of the commentator demanded that its a violation of security. But the fact they missed is that to retrieve a session id you don't need to be a hacker. all you need is to learn how http behave. If you want to see what session ID now you are using then all you need to do is install live http with firefox and enjoy the act of firefox with header

AndyInUK9-Jan-12 23:37

AndyInUK

9-Jan-12 23:37

Thanks for the solution. ok I understand that it is vulnerable to security. So may be we can follow different approach or at least I can put forward different approach. Instead of auto login - we can say, all the members from xyz site can log in to abc site with their xyz username and password.

Solution to this -

1.) Every time, we ask the partner site to provide us the data with username and encrypted passwords and we match it when user tries to log in but this isn't a good solution. We want the process to be automated.

2.) May be they create a web service and we communicate via that web service to let user log in etc.

How do other sites like spotify works? You can login to spotify using facebook login details?

Is there any better way to do this.

Thanks a lot.

User 17164929-Jan-12 23:55

User 1716492

9-Jan-12 23:55

One such solution is via here http://lasso.entrouvert.org/[^] however, you might find this interesting http://www.dynamicalsoftware.com/news/?p=18[^]

modified 1-Aug-19 21:02pm.

cjoki10-Jan-12 11:32

10-Jan-12 11:32

If you are gonna do it, then to answer your question...and this is just "off the cuff", I would most likey set up a seperate server to act as a central store of user logins. All sites must have a registration themselves to access the server and share data. I would then develop a series of scripts with a few interfaces to do...

1) share registered user logins, I would plan on the partner sites maintaining their own and current signup data store, but just have the data sent to a script on this server to process for a shared login. Be certain to scrub the hell out of this regardless of of transport (i.e. - never trust user input, no matter who the user is)
2) a script would be needed to dump the current user logins to the shared login db too.
3) a script to alter a status of a user, ie users baned on one site must not be able to login at yours and vise versa.
4) You will also need a message scheme to notify the target site that site abc has a user that wants login access. I would imagine that this should be managed with a direct server to server communication. This should be like setting a flag for the user. So when the user goes to the new site the login is already done and waiting for them.
5) since logins are handled via session, I imagine a custom session handler is in order as I doubt the default one in php would work. You can google for code to act as a base for your code, or at least for ideas for making your own design.

In a sense this reminds me of have a single login for sites with multiple subdomains and different servers. Here are a few bookmarks of mine that may help shed some light on the session issues related to this and may be an issue to consider as you go forward.

http://shiflett.org/articles/the-truth-about-sessions[^]

http://www.josephcrawford.com/php-articles/going-deep-inside-php-sessions/[^]

I will say again, I have a number of security issues with this. Your going to have a lot of trust in your partners to pull this off and I suspect if your group takes off in popularity the security issues will become even more profound.

You can of course implement a google, or facebook, or some other 3rd party login system. But I can not comment on the pros and cons of them. Maybe someone in the CP forums can?

Chris J
www.redash.org

asoo16-Feb-12 12:25

asoo

16-Feb-12 12:25

i would suggest OAuth.
or OpenID

http://oauth.net/[^]

Gnome 3.2

loctrice6-Jan-12 18:56

loctrice

6-Jan-12 18:56

I dislike the new gnome. I only tried it a little, and it was just too alien. However, a coworker said something I couldn't let go. "You are too young to resist change" and it struck me that computer scientists should probably not resist change.

With this in mind, I went to upgrade my gentoo box to the new gnome. I was determined to try it until I got used to it to give it a fully educated review.

I went to the gentoo upgrade guide , and quickly changed my mind. I left out the default options being wierd. That was a given. The things that bothered me beyond that are quickly adding up. The eselects are long and cryptic, the gs configs are overly complicated, I no longer have a choice for audio and have to use pulse audio, there is no compiz support at all, many of the gnome2 apps have not been ported so they won't work, nvidia cards are pretty well not working and cause several errors, and there are many work arounds for things that don't work already.

I don't think it's a good time to change. What bothers me most about that is now I have to mask it to do a system update, and in a couple months they say they will no longer support the old gnome. If I don't mask it, I have to add lots of ~arch stuff in my update file, meaning it's not ezackery stable yet (though they say it's stable). Why do they make it stop my update?

I think I will keep it masked for now, and wait for it to actually become stable.

Anyone have thoughts on this?

Albert Holguin7-Jan-12 15:44

Albert Holguin

7-Jan-12 15:44

It's a big change for gnome... every time a product makes a big evolutionary change, you can expect growing pains as well as people that are unhappy about where it's going. For now, I think you can safely continue to use the older versions of gnome, if you simply can't adjust to the new gnome in the future (once they stop supporting gnome 2), there's always kde.

loctrice7-Jan-12 18:44

loctrice

7-Jan-12 18:44

I'd be more likely to switch to xfce or lxde.

I was prepared for the growing pains. It's just that it pretty well seems like nothing will work on my machine yet. I have a new nvidia graphics card, which pretty well shoots the new gnome in the foot.

Albert Holguin7-Jan-12 19:27

Albert Holguin

7-Jan-12 19:27

I don't have an nvidia card... so can't comment on that specifically... but at least in Linux there's alternatives... with gnome being the most popular desktop environment, I'm sure the support for a large number of video cards will only continue to improve with time. Unless of course, too many users decide they don't like the new interface and decide to opt for something else, but I honestly don't see that as happening. Hopefully gnome will learn from their mistakes and try to please a wide user base.

loctrice9-Jan-12 3:49

loctrice

9-Jan-12 3:49

I haven't switched to xfce yet. My decision was to wait until the new gnome and nvidia get along and try it again. I'm determined to give it a good shot before leaving. If dropping support for the old gnome causes problems before the new one is up and running on my machine, then I may switch to something else.

Hopefully it won't be long. With people out there using it now, I'm sure it will move swiftly. All they need is users able/willing to submit reports and useage information and I'm confident they will iron out the wrinkles. After it works with nvidia then I'll make the switch.

Albert Holguin9-Jan-12 4:24

Albert Holguin

9-Jan-12 4:24

Good luck! Smile | :)