[FX.php List] Use FMP Accts for CWP logins?

[Gjermund Gusland Thorsen]

If I was cryptic on where to check if you qualify to login,
here is where: $q->SetDBUserPass( $_POST['login'], $_POST['password'] );

ggt

2009/2/22 Gjermund Gusland Thorsen <ggt667 at gmail.com>:
> It's simple, you just enable XML for all FM users that needs to access
> the database from CWP,
> then you let them use their own username and password for
> authentication on the database level.
>
> ggt
>
> 2009/2/22 Head Honcho <headhoncho at customikesolutions.com>:
>> Hi Jonathan,
>>
>> A question.
>>
>> Do all the "authorised" users have CWP "authority"?
>>
>> If so, then if they are correctly authenticated then they can continue
>> (you've already captured their credentials for use elsewhere if necessary).
>>
>> And you can trap for the incorrect authentication and send them back to the
>> login screen to try again, just as you normally would.  So instead of
>> trapping for "not found" trap for "not authenticated"
>>
>> HTH.
>>
>> On 22/02/2009, at 11:04 AM, Jonathan Schwartz wrote:
>>
>>> Thanks William,
>>>
>>> This one is making my head hurt..because there are two kinds of
>>> authentication here:
>>>
>>> 1) CWP Authentication, for the right to interact with the DB
>>> 2) User authentication, for the right to login to the fx.php web solution
>>>
>>> We all use the FMP Accounts and Privileges to establish the CWP
>>> Authentication.
>>>
>>> My question is whether we can use FMP Accounts and Privileges *again* to
>>> authenticate the user logging in a login script, so that a separate User
>>> table is not needed to hold the Username and Password.
>>>
>>> By the Way, I don't believe your example below will work. It has the
>>> form's email address POST value being submitted for the CWP "Account" value.
>>>
>>> Another observation, even if one were to try and use an FMP Accounts and
>>> Privileges Name/Password pair, fx.php throws an XML error if the the CWP
>>> authentication fails in the very likely event that a username and/or
>>> password is entered incorrectly. That's not good.
>>>
>>> This last observation might be the nail in coffin for this idea.
>>>
>>> Yes? No? Maybe?
>>>
>>> Jonathan
>>>
>>>
>>> At 11:16 PM +0000 2/21/09, William Downs wrote:
>>>>
>>>> Hi Jonathon,
>>>>
>>>> Just use the login details as the parameters in the FX instance -
>>>>
>>>> <form id="adrMain" action="adrMain.php" method="post">
>>>>           Email Address:<br />
>>>>           <input type="text" name="manEmail" value=""></input><br />
>>>>           Password:<br />
>>>>           <input type="password" name="manPassword" value=""></input><br
>>>> />
>>>>           <input type="submit" class="a" name="manLogin"
>>>> value="Login"></input>
>>>> </form>
>>>>
>>>> Then on processing page
>>>>
>>>> $dbUser            = $_POST['manEmail'];
>>>> $dbPassword    = $_POST['manPassword'];
>>>>
>>>> $medList=new FX($serverIP,$webCompanionPort,'FMPro7');
>>>> $medList->SetDBData($fmFile,'MedList',$groupSize);
>>>> $medList->SetDBPassword($dbPassword,$dbUser);
>>>>
>>>> $medListResult=$medList->FMFindAll();
>>>>
>>>> But perhaps I am not understanding you properly ?
>>>>
>>>> Kindest
>>>>
>>>> WIlliam
>>>>
>>>> On Sat, Feb 21, 2009 at 10:38 PM, Jonathan Schwartz
>>>> <jschwartz at exit445.com> wrote:
>>>>>
>>>>> In the past, I've always constructed dedicated User tables for use in
>>>>> user
>>>>> authentication (login) in my fx.php solutions.  Now, I have a project
>>>>> where
>>>>> there are dozens of potential authorized users that already have FMP
>>>>> account
>>>>> (name and password).
>>>>>
>>>>> I'm scratching my head trying to figure out how to use the existing FMP
>>>>> accounts in an fx.php login script, rather than recreate the data in a
>>>>> dedicated User table.
>>>>>
>>>>> How to do?
>>>>>
>>>>> J
>>>>>
>>>>>
>>>>> --
>>>>> Jonathan Schwartz
>>>>> Exit 445 Group
>>>>> jonathan at exit445.com
>>>>> http://www.exit445.com
>>>>> 415-370-5011
>>>>> _______________________________________________
>>>>> FX.php_List mailing list
>>>>> FX.php_List at mail.iviking.org
>>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> William Downs
>>>> Development and Support
>>>> BD Databases Ltd
>>>> _______________________________________________
>>>> FX.php_List mailing list
>>>> FX.php_List at mail.iviking.org
>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>
>>>
>>> --
>>> Jonathan Schwartz
>>> Exit 445 Group
>>> jonathan at exit445.com
>>> http://www.exit445.com
>>> 415-370-5011
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>
>>
>> Regards
>>
>> Michael Ward
>> --
>> Head Honcho
>> CustoMike Solutions
>> Member, FileMaker Business Alliance
>> Member, FileMaker Technical Network
>> FileMaker 7 Certified Developer
>> FileMaker 8 Certified Developer
>> FileMaker 9 Certified Developer
>> 10 Wandoo Crt
>> Wheelers Hill, 3150
>> ph 0414 562 501
>> headhoncho at customikesolutions.com
>>
>>
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>