20 pts.
 Universal Login using PHP
Hi to all, I am new here Please help.. How to to create universal login if i log in on one website another one site its partner if another site open automatically log on for example if we log on google mail if we go to orkut automatically log on how can i implement this logic by ramji k k

Software/Hardware used:
ASKED: May 21, 2008  6:39 AM
UPDATED: June 11, 2008  12:53 AM

Answer Wiki:
Hello Ramji, you may use PEAR and it's API capabilities, you can have <a href="http://pear.php.net/manual/en/package.authentication.liveuser.intro.php">more info here</a>. Bye Hello Alessandro.panzetta , Thanks for answer but PEAR something complext i cant understand do u know how to get a cookie value from one site to another site for example we have test1.com and test2.com if some user login in test1.com in that site login user id was stored in cookie at the same time i open the test2.com in that time alert msg display ur login in test1.com current value i want to retrive do u have any php code to retrive the value from other site when currently login Bye
Last Wiki Answer Submitted:  May 22, 2008  12:49 pm  by  alessandro.panzetta   9,660 pts.
All Answer Wiki Contributors:  alessandro.panzetta   9,660 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

Cross-site cookie use is a security issue. You want to likely secure the cookie credentials with some type of encryption or hashing to ensure the identity being offered by the cookie is the actual user’s identity. It would be easy to steal someone’s identity if the cookie is easily read and used.

 32,645 pts.

 

IF the two sites are on the same domain (www.test.com and yyy.test.com) you can usae a domain cookie.
As stated by the previous poster it would be a security risk unless you are on an intranet only.
You are better off using some other type of single sign on like LDAP or SAML. I suggest looking at the wikipedia article on single sign on, also there are good articles at the php home site and also at searchsecurity.techtarget.com

 430 pts.