<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML dir=ltr><HEAD><TITLE>RE: [Xerte] ANN: Toolkits Beta 0.9</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16735" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2><SPAN class=022595809-02122008>Hello
all,</SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2><SPAN
class=022595809-02122008></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2><SPAN class=022595809-02122008>I've just emailed this to
some one off list, but I thought it made sense to
share.</SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2><SPAN
class=022595809-02122008></SPAN></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2><SPAN class=022595809-02122008>Demo.php (demo.txt) was
originally written to be an password free alternative to main login page
which could be hosted within other services.</SPAN></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana><FONT
color=#0000ff><FONT size=2><SPAN class=022595809-02122008>L</SPAN>ook<SPAN
class=022595809-02122008>ing</SPAN> at demo.php, all toolkits <SPAN
class=022595809-02122008>needs</SPAN> is $_SESSION['login_<SPAN
class=022595809-02122008>ldap</SPAN>'], <SPAN
class=022595809-02122008>which is the user's login name
(username).</SPAN></FONT></FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana><FONT
color=#0000ff><FONT size=2><SPAN class=022595809-02122008>So to modify demo.php
to work with another service you could (note this is untested as I haven't
anything to test against) :-</SPAN></FONT></FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008></SPAN><SPAN
class=417512409-02122008></SPAN><SPAN class=417512409-02122008></SPAN><SPAN
class=417512409-02122008><FONT face=Verdana color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2>Lines 17 - 23 can be removed </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2>Then on line 31 </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2>replace $_SESSION['login_ldap'] = ...... with your username
variable.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana><FONT
color=#0000ff><FONT size=2><SPAN class=022595809-02122008>In doing it this way
y</SPAN>ou'd lose some functionality - the sharing feature wants to know
people's names, a<SPAN class=022595809-02122008>nd</SPAN> the password play
feature<SPAN class=022595809-02122008> needs LDAP
again.</SPAN></FONT></FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=417512409-02122008><FONT face=Verdana><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN
class=417512409-02122008><FONT><FONT color=#0000ff><FONT size=2><SPAN
class=022595809-02122008>However</SPAN></FONT></FONT></FONT></SPAN><SPAN
class=417512409-02122008><FONT color=#0000ff><FONT size=2>, if you posted in
/ <SPAN class=022595809-02122008>"</SPAN>getted<SPAN
class=022595809-02122008>" (sp?)</SPAN> in the surname and username you
could set those on<SPAN class=022595809-02122008>
the $_SESSION variables on</SPAN> lines 17 and 23 as well. You'd
need to <SPAN class=022595809-02122008>send</SPAN> them in every time<SPAN
class=022595809-02122008> though.</SPAN></FONT></FONT></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN class=022595809-02122008>I'd recommend (but
can't really offer any guidance) that you took some steps to make sure this
service was made more secure.</SPAN></FONT></FONT></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN class=022595809-02122008>Hope this
helps.</SPAN></FONT></FONT></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008>Pat</SPAN></FONT></FONT></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Verdana><SPAN class=417512409-02122008><FONT
color=#0000ff><FONT size=2><SPAN
class=022595809-02122008></SPAN></FONT></FONT></SPAN></FONT> </DIV></DIV></BODY></HTML>