Admin CP Login

[tHE DSS]

Hiya.

I really would like to get some help/advise with the way vBulletin's AdminCP processes logins.

I get the reason why there is an absolute login policy - that is, even if you are logged into the board, you have to still type your username and password - that's great, because it can stop people from getting to your CP using your computer, say, whilst you nip to the toilet, or somthing - they will still need your username and password.

I've taken a look at the section which deals with all this, and see that the 'global.php' in the admin directory, checks to see if you are already logged into the CP as an admin, and if not, then you get the login box.

That 'form' consists of the usual 'text/password' input boxes, and also, 3 hidden key/values, going by the names of 's', 'login' and 'redirect'.

I see that the 's' key holds your current session hash, and the 'redirect' holds the page you requested.

But, the 'login' key, I don't see how that is processed with the AdminCP. I can't find anywhere where it is used.

What i'm after doing, is mimicing the way the AdminCP's login works, but for another login section.

I don't want to use any cookies (adminon, for example), I just want to use the session hash for tracking.

I've got a global script going with just the bits I need, and stuff... it checks the permissions array for my custom value to see if the current user is allowed to view that section, and if not, then the login boxes appear.

The form that gets called, is a new 'index.php', which calls the same 'global.php' script... the global.php calls the 'functions.php' script also.

So basically, when you type in your details and submit, you get logged in, and a session hash is assigned - then using the $bbuserinfo array, works from there, to check permissions etc.

What i'm finding doesn't work though, is the session hash passing.

Everytime I log in, I can't seem to get the proppa session hash.

I seem to get logged in, and then when redirected back, I have my previous session hash, which is the one as Guest.. but I check the session table, and i'm logged in as me.

It's a problem with obtaining the correct session hash.

Erm... ah man... i'm rambling rubbish I reckon. :nervous: :nervous:

In short : can anyone please explain the basics of the login routine with the AdminCP... so that I can mimic it, but without using cookies, just a session hash to track the user?

Cheers.