[FX.php List] Use FMP Accts for CWP logins?

[Gjermund Gusland Thorsen]

It's simple, you just enable XML for all FM users that needs to access
the database from CWP,
then you let them use their own username and password for
authentication on the database level.

ggt

2009/2/22 Head Honcho <headhoncho at customikesolutions.com>:
> Hi Jonathan,
>
> A question.
>
> Do all the "authorised" users have CWP "authority"?
>
> If so, then if they are correctly authenticated then they can continue
> (you've already captured their credentials for use elsewhere if necessary).
>
> And you can trap for the incorrect authentication and send them back to the
> login screen to try again, just as you normally would.  So instead of
> trapping for "not found" trap for "not authenticated"
>
> HTH.
>
> On 22/02/2009, at 11:04 AM, Jonathan Schwartz wrote:
>
>> Thanks William,
>>
>> This one is making my head hurt..because there are two kinds of
>> authentication here:
>>
>> 1) CWP Authentication, for the right to interact with the DB
>> 2) User authentication, for the right to login to the fx.php web solution
>>
>> We all use the FMP Accounts and Privileges to establish the CWP
>> Authentication.
>>
>> My question is whether we can use FMP Accounts and Privileges *again* to
>> authenticate the user logging in a login script, so that a separate User
>> table is not needed to hold the Username and Password.
>>
>> By the Way, I don't believe your example below will work. It has the
>> form's email address POST value being submitted for the CWP "Account" value.
>>
>> Another observation, even if one were to try and use an FMP Accounts and
>> Privileges Name/Password pair, fx.php throws an XML error if the the CWP
>> authentication fails in the very likely event that a username and/or
>> password is entered incorrectly. That's not good.
>>
>> This last observation might be the nail in coffin for this idea.
>>
>> Yes? No? Maybe?
>>
>> Jonathan
>>
>>
>> At 11:16 PM +0000 2/21/09, William Downs wrote:
>>>
>>> Hi Jonathon,
>>>
>>> Just use the login details as the parameters in the FX instance -
>>>
>>> <form id="adrMain" action="adrMain.php" method="post">
>>>           Email Address:<br />
>>>           <input type="text" name="manEmail" value=""></input><br />
>>>           Password:<br />
>>>           <input type="password" name="manPassword" value=""></input><br
>>> />
>>>           <input type="submit" class="a" name="manLogin"
>>> value="Login"></input>
>>> </form>
>>>
>>> Then on processing page
>>>
>>> $dbUser            = $_POST['manEmail'];
>>> $dbPassword    = $_POST['manPassword'];
>>>
>>> $medList=new FX($serverIP,$webCompanionPort,'FMPro7');
>>> $medList->SetDBData($fmFile,'MedList',$groupSize);
>>> $medList->SetDBPassword($dbPassword,$dbUser);
>>>
>>> $medListResult=$medList->FMFindAll();
>>>
>>> But perhaps I am not understanding you properly ?
>>>
>>> Kindest
>>>
>>> WIlliam
>>>
>>> On Sat, Feb 21, 2009 at 10:38 PM, Jonathan Schwartz
>>> <jschwartz at exit445.com> wrote:
>>>>
>>>> In the past, I've always constructed dedicated User tables for use in
>>>> user
>>>> authentication (login) in my fx.php solutions.  Now, I have a project
>>>> where
>>>> there are dozens of potential authorized users that already have FMP
>>>> account
>>>> (name and password).
>>>>
>>>> I'm scratching my head trying to figure out how to use the existing FMP
>>>> accounts in an fx.php login script, rather than recreate the data in a
>>>> dedicated User table.
>>>>
>>>> How to do?
>>>>
>>>> J
>>>>
>>>>
>>>> --
>>>> Jonathan Schwartz
>>>> Exit 445 Group
>>>> jonathan at exit445.com
>>>> http://www.exit445.com
>>>> 415-370-5011
>>>> _______________________________________________
>>>> FX.php_List mailing list
>>>> FX.php_List at mail.iviking.org
>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>>
>>>
>>>
>>>
>>> --
>>> William Downs
>>> Development and Support
>>> BD Databases Ltd
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>>
>> --
>> Jonathan Schwartz
>> Exit 445 Group
>> jonathan at exit445.com
>> http://www.exit445.com
>> 415-370-5011
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>
> Regards
>
> Michael Ward
> --
> Head Honcho
> CustoMike Solutions
> Member, FileMaker Business Alliance
> Member, FileMaker Technical Network
> FileMaker 7 Certified Developer
> FileMaker 8 Certified Developer
> FileMaker 9 Certified Developer
> 10 Wandoo Crt
> Wheelers Hill, 3150
> ph 0414 562 501
> headhoncho at customikesolutions.com
>
>
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list
>