SnippetMaster Support Forums
Return to main website
 
May 24, 2012, 08:58:08 AM
* Show unread posts since last visit.
* Show new replies to your posts.
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 24, 2012, 08:58:08 AM

Login with username, password and session length
Search:  
Advanced search
* Home Help Search Login Register
SnippetMaster Support Forums  |  General  |  General Discussion & Support  |  Topic: Authentication API « previous next »
Pages: [1] Print
Author Topic: Authentication API  (Read 251 times)
rcschaff

Posts: 3


[-] Authentication API
« on: December 15, 2011, 04:03:22 PM »

I would like to include the Script into my existing administrative section of my website.  I have 2 options:

1).  Continue using .htaccess .htpasswd for securing my admin section, and force people to login to the script seperately.

or

2)  Use the authentication from this script to secure the whole back engine.  I don't really care which one, but being as all of the files, are encrypted, I can' t tell if you are using sessions or what.  If you are, Option 1 will not work. 

Could you please let me know if the script uses sessions, or what I can put in my own php pages to secure them using the security of your script.
Report to moderator   Logged
admin
Forum Administrator
*
Posts: 3070

SnippetMaster Author


WWW
[-] Re: Authentication API
« Reply #1 on: December 15, 2011, 04:10:43 PM »

Hello,

SnippetMaster is using PHP Sessions to handle user authentication.  At the moment there is no API available to authenticate a user from 3rd party software.

This is a feature I am looking to add, however...

(So it would allow you to create your own PHP "call" to the snippetmaster authentication system to validate a user...)

Report to moderator   Logged
rcschaff

Posts: 3


[-] Re: Authentication API
« Reply #2 on: December 15, 2011, 04:14:53 PM »

Could you post the session data and variables you use.  I could simply insert that code into the top of my php pages and just use your auth system.
Report to moderator   Logged
admin
Forum Administrator
*
Posts: 3070

SnippetMaster Author


WWW
[-] Re: Authentication API
« Reply #3 on: December 15, 2011, 04:23:56 PM »

No, I'm sorry, but that would allow the software to be very easily hacked.  The API I am working on will allow you to provide a un/pw combo and then output will be a "pass/fail" response.

From that point, you would need to create your own persistant session system to work with your software...
Report to moderator   Logged
Pages: [1] Print 
SnippetMaster Support Forums  |  General  |  General Discussion & Support  |  Topic: Authentication API « previous next »
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!