Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    text
    copied!<p>I'm not really getting what you want to do, if it is just logging into the site you can maybe do something like this:<br> <em>Mainsite</em>:</p> <pre><code>&lt;iframe id="logon" src="/logonto-other.html"&gt;&lt;/iframe&gt; </code></pre> <p>/<em>logonto-other.html</em>:</p> <pre><code>&lt;form onsubmit="top.logon.style.visibility='none';" action="http://other-site.com/login" method="post"&gt; &lt;dl&gt; &lt;dt&gt;&lt;label for="user"&gt;Name&lt;/label&gt;&lt;/dt&gt; &lt;dd&gt;&lt;input name="user" /&gt; &lt;dt&gt;&lt;label for="pass"&gt;Password&lt;/label&gt;&lt;/dt&gt; &lt;dd&gt;&lt;input name="pass" /&gt; &lt;/dl&gt; &lt;?php //code that acquires hash from other site // Don't know site B so can't write this one yet. ?&gt; &lt;input type="submit" value="Login" /&gt; &lt;/form&gt; </code></pre> <p>This way the user will just be logged into the other site, your interaction abilities with it would still be limited (or should, I think, I never learned the same-origin policies as I have never felt that there is any restriction to what I do. Maybe todays browsers are stricter).</p> <p>About the "2 hop" thing, do you have a certificate and SSL/HTTPS support on your server A? Does server B have this? Do you think you can make the users trust you on having their password? One tip would be that you add a paragraph explaining the situation and a link there the user can contact site B to add pressure on them to implement OAuth and / or OpenID?</p> <p>It might be possible to path something up nicely, even if you don't have HTTPS on your server you can use JavaScript or an Java applet to encrypt the password (there has to be PGP in JavaScript somewhere on the net. Although, if the browsers addressbar turns green, the users have an easier decision whether or not to trust you.</p> <p>Would Like some answers to my questions, and can we be allowed to know what Site B is? And what exactly you try to do, maybe we can work this out together.</p> <p>Wish you good luck.</p>
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload