PHP Sockets - Store User login -
hey there i'm trying implement php socket service used simple shoutbox. shoutbox has simple login form , authentication system based of sessions.
when user logins post requests gets made comparing values database , if valid create session under user.
since these sessions stored on clients computer wondering how php socket able obtain these when it's running on server. php socket running on server , try obtain session server session stored on users pc on login.
i have shoutbox running in php , html5 sockets issue login step i'm not entirely sure how do.
info:
- cookies stored in browser, sessions stored on server.
in case store session id in database , pass along socket call, can verify database.
issues login on web (http) , using session within socket
- passing session id http socket reused on computer , fake successful login.
- login on http expires after time, not mean socket connection has ended
- ending socket connection not log out http
secure approach
- pass username , password on first call within socket login securely. since socket remains open user authenticated , dont need pass session.
- once socket closes session close
Comments
Post a Comment