Remote Authentication

[Whipshock]

Would this be doable (AND SECURE)? Just a thought...

A "partner" website wants to make a portion of their website password protected. It would be great to be able to have members of my vB forums use their same username/password to authenticate at this partner website. But this also raises security questions.

Would this idea work:

I create an HTML document with a form that has Username and Password field and submit button (This document i give to the partner site) This form will submit to a PHP script on my website. It will send the entered username, password, and HTTP referrer. Then the PHP script on my end would check the HTTP referrer to make sure it was on list of my "partner sites", then it would check the username/password against the vB database, and send back either "yes" or "no" as to whether the info was correct.

This keeps all the dB queries on my end and does not pose a security issue (i dont think)

If anyone has any potential problems and ways to fix them please let me know or if anyone has a script already done that does something similar to this or wants to help, also let me know
Thanks !