Click here to Skip to main content
15,888,454 members
Home / Discussions / Linux, Apache, MySQL, PHP
   

Linux, Apache, MySQL, PHP

 
QuestionI need help with this simple form intergration. Pin
ronsang909-Jan-12 7:05
ronsang909-Jan-12 7:05 
AnswerRe: I need help with this simple form intergration. Pin
cjoki9-Jan-12 9:42
cjoki9-Jan-12 9:42 
GeneralRe: I need help with this simple form intergration. Pin
Kevin Schaefer10-Jan-12 14:56
Kevin Schaefer10-Jan-12 14:56 
GeneralRe: I need help with this simple form intergration. Pin
cjoki11-Jan-12 7:27
cjoki11-Jan-12 7:27 
Questionpartner site login Pin
AndyInUK9-Jan-12 5:11
AndyInUK9-Jan-12 5:11 
AnswerRe: partner site login Pin
User 17164929-Jan-12 7:42
professionalUser 17164929-Jan-12 7:42 
AnswerRe: partner site login Pin
cjoki9-Jan-12 9:37
cjoki9-Jan-12 9:37 
AnswerRe: partner site login Pin
Mohibur Rashid9-Jan-12 22:37
professionalMohibur Rashid9-Jan-12 22:37 
Already two expert says it vulnerable and it is 100% true, But Yet here is a solution:

1. When User send a request first verify the user and confirm that the user is valid.
2. if valid then create a socket communication to the other server in port 80 or whatever you have chosen, then create the proper header for the other Server and send a login request to that server.
3. The other server will validate the request and send the data as usual. if success you will get a reply through the socket. Receive all data including the cookies.
4. Extract the session parameter from the cookie. save the cookie in your current server.
5. When user would click any link that forward to the other server then do not create direct link.
first send it to any local php file. In that file first set header value with cookie and then using herader location redirect it to the other server.

Perhaps you can save the retrieved session in uri of the forwarded link and then you would have to add a small process to restore session from external variable which I described in this link[^].

Even though two of the commentator demanded that its a violation of security. But the fact they missed is that to retrieve a session id you don't need to be a hacker. all you need is to learn how http behave. If you want to see what session ID now you are using then all you need to do is install live http with firefox and enjoy the act of firefox with header
GeneralRe: partner site login Pin
AndyInUK9-Jan-12 23:37
AndyInUK9-Jan-12 23:37 
GeneralRe: partner site login Pin
User 17164929-Jan-12 23:55
professionalUser 17164929-Jan-12 23:55 
GeneralRe: partner site login Pin
cjoki10-Jan-12 11:32
cjoki10-Jan-12 11:32 
AnswerRe: partner site login Pin
asoo16-Feb-12 12:25
asoo16-Feb-12 12:25 
QuestionGnome 3.2 Pin
loctrice6-Jan-12 18:56
professionalloctrice6-Jan-12 18:56 
AnswerRe: Gnome 3.2 Pin
Albert Holguin7-Jan-12 15:44
professionalAlbert Holguin7-Jan-12 15:44 
GeneralRe: Gnome 3.2 Pin
loctrice7-Jan-12 18:44
professionalloctrice7-Jan-12 18:44 
GeneralRe: Gnome 3.2 Pin
Albert Holguin7-Jan-12 19:27
professionalAlbert Holguin7-Jan-12 19:27 
GeneralRe: Gnome 3.2 Pin
loctrice9-Jan-12 3:49
professionalloctrice9-Jan-12 3:49 
GeneralRe: Gnome 3.2 Pin
Albert Holguin9-Jan-12 4:24
professionalAlbert Holguin9-Jan-12 4:24 
GeneralRe: Gnome 3.2 Pin
arjo12913-Jan-12 15:54
arjo12913-Jan-12 15:54 
AnswerRe: Gnome 3.2 Pin
loctrice15-Jan-12 16:22
professionalloctrice15-Jan-12 16:22 
GeneralRe: Gnome 3.2 Pin
Albert Holguin16-Jan-12 10:44
professionalAlbert Holguin16-Jan-12 10:44 
GeneralRe: Gnome 3.2 Pin
loctrice16-Jan-12 10:46
professionalloctrice16-Jan-12 10:46 
GeneralRe: Gnome 3.2 Pin
Albert Holguin16-Jan-12 10:50
professionalAlbert Holguin16-Jan-12 10:50 
GeneralRe: Gnome 3.2 Pin
loctrice16-Jan-12 12:33
professionalloctrice16-Jan-12 12:33 
GeneralRe: Gnome 3.2 Pin
loctrice16-Jan-12 14:46
professionalloctrice16-Jan-12 14:46 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.