[FX.php List] Use FMP Accts for CWP logins?

[Jonathan Schwartz]

Thanks William,

This one is making my head hurt..because there are two kinds of 
authentication here:

1) CWP Authentication, for the right to interact with the DB
2) User authentication, for the right to login to the fx.php web solution

We all use the FMP Accounts and Privileges to establish the CWP Authentication.

My question is whether we can use FMP Accounts and Privileges *again* 
to authenticate the user logging in a login script, so that a 
separate User table is not needed to hold the Username and Password.

By the Way, I don't believe your example below will work. It has the 
form's email address POST value being submitted for the CWP "Account" 
value.

Another observation, even if one were to try and use an FMP Accounts 
and Privileges Name/Password pair, fx.php throws an XML error if the 
the CWP authentication fails in the very likely event that a username 
and/or password is entered incorrectly. That's not good.

This last observation might be the nail in coffin for this idea.

Yes? No? Maybe?

Jonathan


At 11:16 PM +0000 2/21/09, William Downs wrote:
>Hi Jonathon,
>
>Just use the login details as the parameters in the FX instance -
>
>  <form id="adrMain" action="adrMain.php" method="post">
>             Email Address:<br />
>             <input type="text" name="manEmail" value=""></input><br />
>             Password:<br />
>             <input type="password" name="manPassword" value=""></input><br />
>             <input type="submit" class="a" name="manLogin"
>value="Login"></input>
>  </form>
>
>Then on processing page
>
>$dbUser            = $_POST['manEmail'];
>$dbPassword    = $_POST['manPassword'];
>
>$medList=new FX($serverIP,$webCompanionPort,'FMPro7');
>$medList->SetDBData($fmFile,'MedList',$groupSize);
>$medList->SetDBPassword($dbPassword,$dbUser);
>
>$medListResult=$medList->FMFindAll();
>
>But perhaps I am not understanding you properly ?
>
>Kindest
>
>WIlliam
>
>On Sat, Feb 21, 2009 at 10:38 PM, Jonathan Schwartz
><jschwartz at exit445.com> wrote:
>>  In the past, I've always constructed dedicated User tables for use in user
>>  authentication (login) in my fx.php solutions.  Now, I have a project where
>>  there are dozens of potential authorized users that already have FMP account
>>  (name and password).
>>
>>  I'm scratching my head trying to figure out how to use the existing FMP
>>  accounts in an fx.php login script, rather than recreate the data in a
>>  dedicated User table.
>>
>>  How to do?
>>
>>  J
>>
>>
>>  --
>>  Jonathan Schwartz
>>  Exit 445 Group
>>  jonathan at exit445.com
>>  http://www.exit445.com
>>  415-370-5011
>>  _______________________________________________
>>  FX.php_List mailing list
>>  FX.php_List at mail.iviking.org
>>  http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>
>
>
>--
>William Downs
>Development and Support
>BD Databases Ltd
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list


-- 
Jonathan Schwartz
Exit 445 Group
jonathan at exit445.com
http://www.exit445.com
415-370-5011