External login access
 

Hi.

I'm trying to login to our vBulletin forum from one external website (at same host).

The process I'm following is accessing the Api with the login_login method, so I recive one proper session.dbsessionhash and the session.userid with a redirect_login response.

Array
(
[session] => Array
(
[dbsessionhash] => 99760b6f1c5d05163475abb143ce8f5a
[userid] => 17256
)

[response] => Array
(
[errormessage] => Array
(
[0] => redirect_login
[1] => Demouser
)

)

)

My problem is that I'm stuck in there because what I want is when I click the link to access the forums I still see the login and pasword textboxes so something has not been done properly.

I suposse I'm not creating a real session. Could someone point me in the right direction? What I need is access my vBulletin and appear logged when I click my forum link from the website I'm calling the API login_login method.

Thank you very much in advance

So none could point me in the right direction? I see in the session table there is a new record with all the proper values, the only strange thing i see is the IP address is the one from the server i realize the curl action (the one that authenticates first the username and password).

Is there any way I could use those values to force one authentication at my vbulletin site once i click my forum link?

Thank you very much

You can't really set cookies cross domain... normally.

Hi

It's not cross domain. Both elements are sharing the same domain.

http://www.domain.com/a -> source place where people is login
http://www.domain.com/vbulletin -> my vbulletin

So from http://www.domain.com/a/login.php the process I'm following is:

1. I call http://www.domain.com/vbulletin/api.php
2. I am using login_login and passing the proper parameters
3. I recive a dbsessionhash and the userid that are stored at the session table

When I check in the table, the only thing I notice is the IP address is the host one, because is the one calling api.php.

My goal is one I do http://www.domain.com/a/login.php and I go http://www.domain.com/vbulletin, the user appears logged, so I suposse I just need to force the session or the cookie in some way, but I still don't know how to do it.

Could anyone point me in the right direction?

Thank you very much