linking site to a different site

rutu

TS732, WS8

 

 

I have posted similar kind of post earlier. I am posting it  with diffferent perspective.

 

www.acr.com has a login page. There is a per-login site and post-login site. pre-login and post-login are created as two different siblisher. When a user logs o to www.acr.com, he lands on index page o pre-login. Once he provides credentials and its validated, he lands on index page of post-login site.

 

If there are two pages, I can understand how they can be linked. How are twom sites linked ? Is it just http request sent from login form to a diffferent URL, which renders, index page for that URL ? OR there is some other mechanism ?

 

Thanks

Rick Poulin

If you have sensitive data behind your secured area, stop now and hire someone that knows something about web security.

 

Generally speaking, the form data has to be submitted to the domain that served the form in the first place. Otherwise, that's a security hole. Once the credentials have been validated, that page can then respond with a HTTP302 to redirect to the new site. However, in order for that other site to know who you are, you'll have to pass some kind of session ID or a SAML token. Doing so cross-domain is very tricky if you don't know what you're doing, mainly because cookies can't be used across domains and so it becomes difficult to validate that the client that submitted the form is the same client that's attempting to use the session or auth token. That's why SSO solutions exist.

 

If your data is NOT sensitive and your login is merely there for personalisation, then you could use much less secure solutions. That's generally not a good idea, because some developer in the future could add sensitive information without realizing that your security sucks.

 

If we're talking about different LiveSite sites all living under a same domain, then I'm not entirely sure what you're asking... but typically the login page would still validate the creds, then send back a cookie along with a HTTP302 to redirect to wherever you want to be.

 

Also, none of this has anything to do with LiveSite. You need to figure this out before you try integrating it with the iwov platform.