Advertisement:

Author Topic: Same username/password for all my forums. Possible?  (Read 8710 times)

Offline Srinib

  • Jr. Member
  • **
  • Posts: 207
    • India Exit Polls
Same username/password for all my forums. Possible?
« on: July 06, 2012, 02:52:45 PM »
I know it is weird to ask this. But i really need this.
I have three forums running on SMF 2.0.2. Is it possible for a member to use all the three forums with the same username and password, by just registering to any one of those three forums?

I know there is some OPENID for such things. But i don't think many of my members  will go for that.

If i am asking for too much, my apologies.

Offline Kenny01

  • Sr. Member
  • ****
  • Posts: 767
  • Gender: Male
Re: Same username/password for all my forums. Possible?
« Reply #1 on: July 06, 2012, 03:04:12 PM »
The 3 forums need to be on the same domain and same database for it to work.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,982
    • StoryBB/StoryBB on GitHub
Re: Same username/password for all my forums. Possible?
« Reply #2 on: July 06, 2012, 03:34:42 PM »
Actually that's not strictly true (they only need to be on the same domain if you want the *login* to be shared, i.e. logged into one logs you into all the rest, you can still use the same details even if they're on different domains, but you would have to log into each one separately)

There really is no easy way to do this, there are a lot of bits to it and you'd have to do everything just right to avoid making it insecure in the process, and there are not many people who know how to do it right. It's best avoided if possible.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Srinib

  • Jr. Member
  • **
  • Posts: 207
    • India Exit Polls
Re: Same username/password for all my forums. Possible?
« Reply #3 on: July 06, 2012, 04:04:45 PM »
I have a doubt that i am trying for something which is not that easy. I really don't want to go into anything complicated; and confused the members in that process. Thanks a lot.

Online Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,630
  • Gender: Male
    • Kindred-999 on GitHub
Re: Same username/password for all my forums. Possible?
« Reply #4 on: July 07, 2012, 08:02:32 AM »
actually, if you have all of the forums on the same server and database, I have seen the code which would enable you to have one forum set across multiple domains.

Pretty snazzy, actually....

a.com
b.com
c.com
all point to the same server and share the same forum, same users, etc... but display different boards and different themese based on the incoming domain (and can share boards between domains as well)
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Armada

  • Jr. Member
  • **
  • Posts: 283
  • Gender: Male
  • Tux loves Linux
Re: Same username/password for all my forums. Possible?
« Reply #5 on: July 25, 2012, 05:11:42 PM »
How about replicating the username/password table keeping them all the same for all three forums?
--- SMF Rocks even more than YabbSE---

Online Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,630
  • Gender: Male
    • Kindred-999 on GitHub
Re: Same username/password for all my forums. Possible?
« Reply #6 on: July 25, 2012, 05:20:08 PM »
won't work... the hash on the passwords would be different
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,982
    • StoryBB/StoryBB on GitHub
Re: Same username/password for all my forums. Possible?
« Reply #7 on: July 25, 2012, 05:25:31 PM »
Um, why would they be different?
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Armada

  • Jr. Member
  • **
  • Posts: 283
  • Gender: Male
  • Tux loves Linux
Re: Same username/password for all my forums. Possible?
« Reply #8 on: July 25, 2012, 05:37:20 PM »
Is it a random salt on the hash or is it unsalted?
--- SMF Rocks even more than YabbSE---

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,982
    • StoryBB/StoryBB on GitHub
Re: Same username/password for all my forums. Possible?
« Reply #9 on: July 25, 2012, 05:41:43 PM »
Interesting question, since the answer is neither. (Non random salt != unsalted)

The password hash in SMF is (like, I would add, several other forum systems), sha1(strtolower(username) . password)

You get all the benefits of salting the hash, it's a per-user salt so it neutralises rainbow tables, but you don't require any additional columns etc.

If you were to use the erroneously-named password_salt column, you actually don't really benefit much because you still have to prepare a brute attack per row should you get hold of the DB table.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline nend

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 1,755
  • 2 deep n2 the code
    • sicommnend on GitHub
    • SIComm.us
Re: Same username/password for all my forums. Possible?
« Reply #10 on: July 26, 2012, 12:19:52 AM »
I built something a while back that was similar. I don't recall if I saved the code or not. Basically it was two sites on different domains, different databases but on the same server. I think I had some rules to check the email address, password and username to see if they where the same when a user logged into one. If they where the same I had the server generate a hidden 1px image on the screen from the other domain which set the other cookie. In the URL to the image contained the token which would expire after a minute.

I know the sites that I had this configured on, one of them is still up and running on SMF 1.1.x branch, the other one though is gone. I am thinking the files should still be there but have to look for them. I am digging in them now, it has been a long time since I touched the source of this site, maybe 2 years. Finding allot of useful old code I have done and forgot about.