[mrpaint]

Originally Posted by RWerksman

Ok, but what does it compare to:from? It looks like it compares the Facebook pulled userid to the stored fbuid in the user table, but something doesn't quite match up.

For instance, if I setup two identical applications, and repoint the application to use the second one, you would have to setup a new user as it wouldn't recognize my login correctly.

If no check had been done before, the check will be implement as a javascript scope. The flow is below

1. Check for Facebook session
2. If session found, send the associated facebook uid via ajax to our server
3. Server check to see if that facebook uid is connected and the forum member enabled the auto-login feature. If everything is found and matched, server return a positive flag, otherwise, server will send a negative one
4. The javascript code receives the response and redirect to login page (do the cookie, forum's session things) if it found a positive flag
5. The javascript code marked (using cookie) as the check has been done and store a time note to prevent future check

That's how things are going

Edit: Oops. If you replace the API key with the 2nd application's one, from our forum, we won't able to check for connected user who connected with us using the 1st application's API key. Everything should be done using only one API key. The relationship is 1-to-1. If you decide to change, I suggest you to uninstall the product and import the xml file again...