The Joomla! Forum ™

Download

Demo


Board index » Joomla! Development Forums » Joomla! Development » Joomla! 2.5 Coding

Forum rules


Please use the mailing list here: http://groups.google.com/group/joomla-dev-general rather than this forum.



Post new topic Reply to topic  Page 1 of 1
  [ 2 posts ] 
  Print view Previous topic | Next topic 
Author Message
mojito
PostPosted: Tue Jul 10, 2012 5:51 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Wed Sep 07, 2005 10:18 pm
Posts: 600
Location: London
I need to understand a bit more about how joomla authentication is working so we can add to it some things.

1) is it a cookie that is encrypted or a session (I read that a session is more secure but then I see many sites work even if you close the browser then reopen you can still be logged in - joomla is like this for me so does this mean joomla is using cookies NOT session)

2) is there a good place we can add a cookie upon registration and activation to the local machine browser ?

Thanks for your help in this.

_________________
Check out the 'bad toilet' online !
Top
 Profile  
 
bbolli
PostPosted: Wed Jul 11, 2012 7:18 pm 
Joomla! Explorer
Joomla! Explorer

Joined: Fri Nov 11, 2011 9:43 pm
Posts: 435
Location: Chicago, IL
I'm currently working on something very similar for my company, creating a authorization plugin to work with our internal API.

1) Joomla has a sessions table and uses tokens to verify validity

2) Cookies can be created a website, but I believe in your case where the browser logs you in automatically is tied to your browser saving the password and logging you in. I have the same thing happen, even if I close Chrome completely and launch a new window my last session is saved. You can use Chrome's Icognito Feature to check, even if you're logged in, it should act as if you've never logged in. If you don't use Chrome, just try a different browser then the one you use by default to try the same test.

One of things I did to help me in writing the plugins and modules to authenticate was reverse engineering Joomla's core authentication plugins and downloading 3rd party apps with high ratings and reverse engineering.
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 2 posts ] 


Board index » Joomla! Development Forums » Joomla! Development » Joomla! 2.5 Coding

Who is online

Users browsing this forum: No registered users and 12 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group