I have group of websites with a single user database. I assign each user a single home site based on their original registration. If a user logs in from his/her home site, the normal login process takes place. However, if a user attempts to login from a site other than his/her home site, I redirect the request to the home site. Following is the sequence of calls in the event user logs in from non-home site.
http://non-homesite/login.cgi - The perl code in non-homesite server redirect to http://homesite.com/login.cgi?UserId=xxx&Password=yyy
The home site upon receiving the request, processes the login and this time the perl code in the home site redirects to http://homesite.com/memberoptions.cgi
This works OK. But the problem is that the URL (revealing the password as one of the params) for the first redirection shows in the browser location bar briefly (before it is replaced by the second redirection URL).
I am using CGI::Session to set the sessions. I would like to be able to do 1 of the following 2 things.
1. Not have the params show (in the browser location bar) during the first redirection. It appears that GET is the only method I can use during redirection (which I do using CGI.pm methods)
2. Set the session for the home site, from a non-home site. This again looks like not a possibility in the normal way with CGI::Session as cookies for the domain would need to be set.
Is there a third way? My goal is to get the user automatically logged to the home site regardless of the site he/she is logging into.
My knowledge of perl and other web technologies is very limited. I would appreciate any advice.
In reply to A perl session question by rajivp
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |