Hi to all, I am new here
Please help..
How to to create universal login
if i log in on one website another one site its partner
if another site open automatically log on
for example
if we log on google mail
if we go to orkut automatically log on
how can i implement this logic
by
ramji k k
Software/Hardware used:
ASKED:
May 21, 2008 6:39 AM
UPDATED:
June 11, 2008 12:53 AM
Cross-site cookie use is a security issue. You want to likely secure the cookie credentials with some type of encryption or hashing to ensure the identity being offered by the cookie is the actual user’s identity. It would be easy to steal someone’s identity if the cookie is easily read and used.
IF the two sites are on the same domain (www.test.com and yyy.test.com) you can usae a domain cookie.
As stated by the previous poster it would be a security risk unless you are on an intranet only.
You are better off using some other type of single sign on like LDAP or SAML. I suggest looking at the wikipedia article on single sign on, also there are good articles at the php home site and also at searchsecurity.techtarget.com