Changes between Version 4 and Version 5 of login-service

Timestamp:

Aug 10, 2014, 4:49:14 PM (11 years ago)

Author:

Jamie McClelland

Comment:

--

login-service

@@ -20 +20 @@
 
 {{{
+#!/bin/bash
+user="$1"
+pass="$2"
+app_id="$3"
+out=$(curl -s "https://members.mayfirst.org:8080/check?user=$user&password=$pass&app_id=$3")
+[ "$out" = "yes" ] && exit 0
+exit 1
+}}}
+
+{{{
 <?php
 
@@ -32 +42 @@
 }}}
 
+While GET functions are easier to write, POST functions are less likely to log your password
+(on the client side - logging is disabled on the server side).
+
 {{{
-#!/bin/bash
-user="$1"
-pass="$2"
-app_id="$3"
-out=$(curl -s "https://members.mayfirst.org:8080/check?user=$user&password=$pass&app_id=$3")
-[ "$out" = "yes" ] && exit 0
-exit 1
+<?php
+
+function authenticate_user($user, $password, $app_id) {
+        $url = 'https://members.mayfirst.org:8080/check';
+        $vars = 'user=' . $user . '&password=' . $password .
+         '&app_id=' . $app_id;
+
+        $ch = curl_init( $url );
+        curl_setopt( $ch, CURLOPT_POST, 1);
+        curl_setopt( $ch, CURLOPT_POSTFIELDS, $vars);
+        curl_setopt( $ch, CURLOPT_HEADER, 0);
+        curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1);
+
+        $response = curl_exec( $ch );
+
+        if($response == "yes") return TRUE;
+        return FALSE;
+}
 }}}
+
+