views:

80

answers:

2

We have a website with a section restricted to members only. They log in and can view the website.

Some of the information is stored on another server. We want that information to ONLY be accessible to those who have logged into the main website.

What would be the best way to link the two sites, without making members log in again? Seems like there must be some way to send an encrypted username and password along with the URL in the hyperlink.

Any ideas? Thank you in advance.

Fred G.

A: 

I think you are looking for some "Single Sign On" solution.

Gabriel Ščerbák
A: 

You can add the session ID as a GET parameter to the URL (eg suffix it with ?SESSIONID=<long ID here>, then have the second site validate the session (check that it's logged in, check that the logged in user has access to the resource they're requesting) in a shared database.

caf
This holds promise, but I have no idea how to do that...
Fred Griffith

related questions