Cross Domain Auth

[dsch]

Hi

First, I have tried to search the forums but couldn't find anything specific on this. If there alread is a topic on this, just post the URL for that. Thanks!

My problem is that I want to be able to auth users on other domains (same server), just by they are logged in at vbulletin. I figure that I would need to use the cookie, and save it a little different, but is there a good and foremost SECURE way to do this?

I can do most things in PHP, so it's no problem for me whatever solution in PHP that has to be programmed (figure out that you might need to use session data too and save it in a database or something).

My way before, to keep security was to transfer username and encryptet combined data from vbulletin database (of course, NO PASSWORD even though it is encryptet already in the database) to my other site, and then used THAT for auth. The only problem is that you have to go the the vbulletin board and click on a link to be authed at the other site!

It would be great if someone knew or already have done this. Remember, security is very high priority, so if it would be too much of a break in that, then I will find another way.

Hope someone smart can help me out here! :up:

[Marco van Herwaarden]

Normal security prevents cookies to be used/set for another domain.