Programming question about web technologies

[jbubrisk]

I'm trying to build a "system" to keep people logged in across multiple sites. It will be similar to google checkout, or microsoft passport, in that a third party is hosting the data, but its different in that the login will need to occur in the middle of a checkout process, and it will also need to keep the login persistent across multiple sites. I read something about using cross domain cookies, but it looks like that would require modifications to the Apache config. The problem is that I will not be able to mess with the "client" sites. Is there any way to do this purely web based (ie. no toolbars in your web browser).

 

[snapper316]

hmm..

Main Site A where you log in

with sub site b, c, and d


if they are logged into A display b c or d in an Iframe on the current page. if there is no session on A then do not display any pages in the iframe

?? Not very secure as they could still access b, c, d directly rather than through Main Site A

 

[jbubrisk]

That would be great, however, there is no real "main site". There is a "main site" in a sense that there is a place where all the data is stored, but customer's will only go DIRECTLY to b,c,d, NOT THROUGH site a. Does that make sense? So you would go to site b, and it would determine whether or now you have an account/are logged in at site a. You would never (or almost never) go to site a directly, except to originally create your account or directly modify your account data.

 

[snapper316]

yeah i think you can do something like that.

everything(b,c,d) will have to reference back to site A and detect the appropriate cookie.


(whatever code you would put on site a to detect a session establish a cookie and login will be placed on all sites)