[FX.php List] Use FMP Accts for CWP logins?
Jonathan Schwartz
jschwartz at exit445.com
Sun Feb 22 13:49:58 MST 2009
Hmmm...
This doesn't quite work for me.
$query = new FX($serverIP, $dataPort, $dataSourceType, $scheme);
$query->SetDBData ('DB.fp7');
$query->SetDBUserPass ('myusername', 'mypassword');
$findResult = $query->FMFind();
The code above produces a 958 error...missing parameter. I know what
it is looking for...the layout. But a layout shouldn't be required.
When I do add a layout to the second line, it finds all the records
in the table.
Fianly, if the username/pass pair is incorrect, I get:
FX: ExecuteQuery XML error: mismatched tag at line 6Foundcount: Error Code:
Is this a bad idea from the start?
J
At 5:18 PM +0100 2/22/09, Gjermund Gusland Thorsen wrote:
>If I was cryptic on where to check if you qualify to login,
>here is where: $q->SetDBUserPass( $_POST['login'], $_POST['password'] );
>
>ggt
>
>2009/2/22 Gjermund Gusland Thorsen <ggt667 at gmail.com>:
>> It's simple, you just enable XML for all FM users that needs to access
>> the database from CWP,
>> then you let them use their own username and password for
>> authentication on the database level.
>>
>> ggt
>>
>> 2009/2/22 Head Honcho <headhoncho at customikesolutions.com>:
>>> Hi Jonathan,
>>>
>>> A question.
>>>
>>> Do all the "authorised" users have CWP "authority"?
>>>
>>> If so, then if they are correctly authenticated then they can continue
>>> (you've already captured their credentials for use elsewhere if necessary).
>>>
>>> And you can trap for the incorrect authentication and send them back to the
>>> login screen to try again, just as you normally would. So instead of
>>> trapping for "not found" trap for "not authenticated"
>>>
>>> HTH.
>>>
>>> On 22/02/2009, at 11:04 AM, Jonathan Schwartz wrote:
>>>
>>>> Thanks William,
>>>>
>>>> This one is making my head hurt..because there are two kinds of
>>>> authentication here:
>>>>
>>>> 1) CWP Authentication, for the right to interact with the DB
>>>> 2) User authentication, for the right to login to the fx.php web solution
>>>>
>>>> We all use the FMP Accounts and Privileges to establish the CWP
>>>> Authentication.
>>>>
>>>> My question is whether we can use FMP Accounts and Privileges *again* to
>>>> authenticate the user logging in a login script, so that a separate User
>>>> table is not needed to hold the Username and Password.
>>>>
>>>> By the Way, I don't believe your example below will work. It has the
>>>> form's email address POST value being submitted for the CWP
>>>>"Account" value.
>>>>
>>>> Another observation, even if one were to try and use an FMP Accounts and
>>>> Privileges Name/Password pair, fx.php throws an XML error if the the CWP
>>>> authentication fails in the very likely event that a username and/or
>>>> password is entered incorrectly. That's not good.
>>>>
>>>> This last observation might be the nail in coffin for this idea.
>>>>
>>>> Yes? No? Maybe?
>>>>
>>>> Jonathan
>>>>
>>>>
>>>> At 11:16 PM +0000 2/21/09, William Downs wrote:
>>>>>
>>>>> Hi Jonathon,
>>>>>
>>>>> Just use the login details as the parameters in the FX instance -
>>>>>
>>>>> <form id="adrMain" action="adrMain.php" method="post">
>>>>> Email Address:<br />
>>>>> <input type="text" name="manEmail" value=""></input><br />
>>>>> Password:<br />
>>>>> <input type="password" name="manPassword" value=""></input><br
>>>>> />
>>>>> <input type="submit" class="a" name="manLogin"
>>>>> value="Login"></input>
>>>>> </form>
>>>>>
>>>>> Then on processing page
>>>>>
>>>>> $dbUser = $_POST['manEmail'];
>>>>> $dbPassword = $_POST['manPassword'];
>>>>>
>>>>> $medList=new FX($serverIP,$webCompanionPort,'FMPro7');
>>>>> $medList->SetDBData($fmFile,'MedList',$groupSize);
>>>>> $medList->SetDBPassword($dbPassword,$dbUser);
>>>>>
>>>>> $medListResult=$medList->FMFindAll();
>>>>>
>>>>> But perhaps I am not understanding you properly ?
>>>>>
>>>>> Kindest
>>>>>
>>>>> WIlliam
>>>>>
>>>>> On Sat, Feb 21, 2009 at 10:38 PM, Jonathan Schwartz
>>>>> <jschwartz at exit445.com> wrote:
>>>>>>
> >>>>> In the past, I've always constructed dedicated User tables for use in
>>>>>> user
>>>>>> authentication (login) in my fx.php solutions. Now, I have a project
>>>>>> where
>>>>>> there are dozens of potential authorized users that already have FMP
>>>>>> account
>>>>>> (name and password).
>>>>>>
>>>>>> I'm scratching my head trying to figure out how to use the existing FMP
>>>>>> accounts in an fx.php login script, rather than recreate the data in a
>>>>>> dedicated User table.
>>>>>>
>>>>>> How to do?
>>>>>>
>>>>>> J
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Jonathan Schwartz
>>>>>> Exit 445 Group
>>>>>> jonathan at exit445.com
>>>>>> http://www.exit445.com
>>>>>> 415-370-5011
>>>>>> _______________________________________________
>>>>>> FX.php_List mailing list
>>>>>> FX.php_List at mail.iviking.org
>>>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> William Downs
>>>>> Development and Support
>>>>> BD Databases Ltd
>>>>> _______________________________________________
>>>>> FX.php_List mailing list
>>>>> FX.php_List at mail.iviking.org
>>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>>
>>>>
>>>> --
>>>> Jonathan Schwartz
>>>> Exit 445 Group
>>>> jonathan at exit445.com
>>>> http://www.exit445.com
>>>> 415-370-5011
>>>> _______________________________________________
>>>> FX.php_List mailing list
>>>> FX.php_List at mail.iviking.org
>>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>>
>>>
>>> Regards
>>>
>>> Michael Ward
>>> --
>>> Head Honcho
>>> CustoMike Solutions
>>> Member, FileMaker Business Alliance
>>> Member, FileMaker Technical Network
>>> FileMaker 7 Certified Developer
>>> FileMaker 8 Certified Developer
>>> FileMaker 9 Certified Developer
>>> 10 Wandoo Crt
>>> Wheelers Hill, 3150
>>> ph 0414 562 501
>>> headhoncho at customikesolutions.com
>>>
>>>
>>>
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>>
>>
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list
--
Jonathan Schwartz
Exit 445 Group
jonathan at exit445.com
http://www.exit445.com
415-370-5011
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.iviking.org/pipermail/fx.php_list/attachments/20090222/46fe2ce6/attachment-0001.html
More information about the FX.php_List
mailing list