English 中文(简体)
Integrating 3rd-party forum software to member-based website
原标题:

When using some existing forum software in a larger web-site, how easy is it to:

1)Make your site s login functionality log the user into the forum

2)Make your site s registration functionality create forum login data

I suppose in a way it might be easier to ONLY use the forum s database for maintaining users, but that means trusting it with sensitive data.

I m planning an integration between an existing bespoke desktop app and a new bespoke web-site which should include forums. I don t know which forums will be used but I know the new web functionality won t be PHP-based. I figure that s not a big deal but I m wondering if forums typically allow configuration of where they look for login data, to avoid duplicating this data into my DB and the forum DB.

问题回答

It s usually pretty easy, but it completely depends on the Forum software that you choose.

I ve written systems in both PHP and ASP.Net (C#) that integrate with phpBB or vBulletin databases.

The login functionality is the easiest part to implement because the hash is stored in the DB (usually a salt will be too), and you just need to check one field to another and voila you can authenticate!

The registration of users is a little more difficult.

The way I did it was browsing through their source code to find out what SQL commands were necessary during the registration step.

So, depending on the forum software you choose, the difficulty will change, but overall it s not to difficult to make happen.

I would offer you snippets on how to integrate with PHPBB and VB, but since those are both PHP based, you said you weren t going to use them.

You are actually looking for a Single Sign On feature, that is integrated in several forum softwares, like Simple Machines and JForum for example.





相关问题
Signed executables under Linux

For security reasons, it is desirable to check the integrity of code before execution, avoiding tampered software by an attacker. So, my question is How to sign executable code and run only trusted ...

MALICIOUS_CODE EI_EXPOSE_REP Medium

I run findbugs against all of my code and only tackle the top stuff. I finally got the top stuff resolved and now am looking at the details. I have a simple entity, say a user: public class User ...

XSS on jsbin.com

Anyone know if jsbin.com implements any protection for XSS or other javascript attacks? I see jsbin links used fairly regularly on sites like this one and I can t find any indication from the site ...

Make md5 strong

Im making a website that will intergrate with game that only support md5 hashing metod (atm). Which ofc is not especially safe anymore. But how could i make it stronger? Should I just generate long ...

Why running a service as Local System is bad on windows?

I am trying to find out the difference between difference service account types. I tumbled upon this question. The answer was because it has powerful access to local resources, and Network Service ...

Brute-force/DoS prevention in PHP [closed]

I am trying to write a script to prevent brute-force login attempts in a website I m building. The logic goes something like this: User sends login information. Check if username and password is ...

热门标签