How to make a single authorization system in PHP?

N

nazimov2014-02-20 20:20:55

PHP

nazimov, 2014-02-20 20:20:55

How to make a single authorization system in PHP for several projects on different servers? How to properly store user data on servers?
Thanks in advance!

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

H

hellroy, 2014-02-20
@hellroy

The password must be hashed.
For single authorization, you can use OpenID
https://github.com/openid/php-openid

S

systemiv, 2014-02-20
@systemiv

You can just do each service through a shim, in which you will redirect with the token back and write the cookie

V

Vlad Zhivotnev, 2014-02-20
@inkvizitor68sl

Use OpenID or oAuth.

M

Maxim Uglov, 2014-05-04
@Vencendor

From the site on which you need to log in, we send the donor accounts to the site.
If not automated, we suggest automating by writing down where the user came from.
If there is authorization, we send back via the link auth.php?user=username&token=code
code should consist of md5 (or better, salted md5 ) from ip+user_name+secret_code
secret_code should not be in clear text anywhere figure. only when generating code and checking.
it is also desirable to pass the page from which the user started the authorization process. it must be passed to and from the account server. After checking the code, do a redirect on it.