<< Back
Message for this thread
Posted by Messages text
castriotta michele

Avatar
Total post : 43
> Profile
Written on : 19/10/2010 12:19 ( more than one month )
Object : Login docebo for another site web
hello.

I have install for my localhost docebo 3.6.0.4.

I want the login page on external site. In localhost i have two directory(Docebo and MySiteWeb).


I have create one external module for my site web. I have copy any code I have found of this post

http://www.docebo.com/community/doceboCms/forum/9_1/message/idThread_4855/Login_Page_in_home_page.html


The problem is:

The version of Docebo 3.6.0.4 in login module have a
hidden field with a value. I don't know how this value is calculate..

Can you help me?

thanks

Michele Castriotta
bircastri@hotmail.it
www.mikelecastriotta.altervista.org
 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 20/10/2010 12:25 ( more than one month )
Object : Re: Login docebo for another site web
hello,
yes in docebo 3.6.0.4 we've introduced the security tocken / authentication code  that it is needed for security reason.

So it is no longer possible to setup an external login form without editing the code of your docebo installation.

You should disable the check only for the login action cause it won't be a good thing to disable it globally.

bye,
Giovanni. 

Docebo Staff
 - Docebo 4 released! -

 
castriotta michele

Avatar
Total post : 43
> Profile
Written on : 21/10/2010 09:28 ( more than one month )
Object : Re: Login docebo for another site web
thank you for your reply.

But where is the function who generate the token for the security?
Michele Castriotta
bircastri@hotmail.it
www.mikelecastriotta.altervista.org
 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 22/10/2010 18:02 ( more than one month )
Object : Re: Login docebo for another site web
Hello,
the function is getSignature() in doceboCore/lib/lib.authenticate.php

bye,
Giovanni.

Docebo Staff
 - Docebo 4 released! -

 
Kuiper Vincent

Noavatar
Total post : 10
> Profile
Written on : 27/12/2010 04:06 ( more than one month )
Object : Re: Login docebo for another site web
Hello

I changed the last line of the lib.authenticate file to: 
if (Authenticate::getIsPostRequest()) {}.

now my login module works again Laughing
 
thanks for the explanation Giovani 
 
Derks Giovanni

Avatar
Total post : 1861
> Profile
Written on : 27/12/2010 15:20 ( more than one month )
Object : Re: Login docebo for another site web
Hello,
this method is not the secure one. Doing like this you are disabling this important security feature introduced with 3.6.0.4.

You should had inserted the authentication token in your generated form instead.

bye,
Giovanni. 

Docebo Staff
 - Docebo 4 released! -

 
<< Back