Linking my login form to ZenPhoto / Client Login / Auto Submiting Login Form

viavianci

Hello,

I have integrated ZenPhoto for a client and am having a problem with a feature I'm trying to implement. The client is a photographer, as well as the normal galleries, he has password protected galleries for his clients.

He has a link on his homepage "Client Login", I'd like to link that to a form, take the username and password from the form:-

-Using the username, direct the user to his client gallery
-Use the username and password to log the user in so that he doesn't need to fill in the form that appears when you're not logged in (seeing as that would mean asking for the details twice!)

Is there anyway of doing this?

sbillard

You can create a zenphoto cookie from his usercode and password. The zenphoto login is handled circa line 37 in auth_zp.php. There you will see how the cookie is created when one logs into zenphoto. You will have to create zenphoto admin users with the same user/password for this to work.

viavianci

Hello, I'm not the most advanced PHP user - is there any documentation that explains how the cookies are created?

sbillard

There is documentation on setcookie in the PHP documents: http://us2.php.net/manual/en/function.setcookie.php. The above reference will show you what zenphoto does.

viavianci

Thanks for your help, that was most helpful sbillard - I was able to add the feature I wanted.

viavianci

Hi there,

Actually I've just realised that my solution isn't working yet. My code is as follows:

<?php

require_once("http://www.mysite.com/zenphoto/zp-core/lib-utf8.php");
require_once("http://www.mysite.com/zenphoto/zp-core/functions-db.php");

$post_user = $_POST["user"];
$post_pass = $_POST["pass"];

setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, "/");

header('Location: http://www.mysite.com/zenphoto/' . $post_user);

?>

SBillard - do you have idea what I could do to make this work?

sbillard

With an installation in the folder 'zenphoto' the cookie path needs to be `zenphoto/`

so `setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, "zenphoto/");`

viavianci

Hi, I actually sorted the problem by copying the file to /zenphoto and using zp_setcookie.

Could you please let me know how I can verify the username and password entered by the client is correct before I create the cookie!

I know the answer is in auth_zp.php file - but I'm having difficulty locating it!

Thanks in advance!

sbillard

`if (checkAuthorization(md5($post_user . $post_pass))) {

zp_setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, $cookiepath);

} else {

zp_setcookie("zenphoto_auth", "", time()-368000, $cookiepath);

}`

viavianci

Hello,

Can I ask what is the difference between: checkAuthorization & checkLogon?

The checkAuthorization does work, but the cookie is not being set (I get the enter username + password form). My code:

<?php

require_once("lib-utf8.php");
require_once("functions-db.php");

$post_user = $_POST["user"];
$post_pass = $_POST["pass"];

if (checkAuthorization(md5($post_user . $post_pass)))
{
zp_setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, "/");
header('Location: http://www.mysite.com/script/' . $post_user);
}

else
{
zp_setcookie("zenphoto_auth", "", time()-368000, "/");
echo "wrong username / password";
}

?>

viavianci

Hello,

Just to add,

If I login using my login form, the authentication part works fine, it redirects me to the gallery but the cookie is not set as I get the username and password form.

If I try to login again through my form, it works! It's just the first time that it doesnt work - do you know why this could be?

sbillard

Cookies cannot be set after you have generated output. If you echo "wrong username / password" shows up in anything but a blank page then you have already sent headers so your cookie is not saved. This processing must be done before any headers, etc. are sent. So you would have to have some error variable set so that later you can display your error message.

In answer to your original question, checkLogon() checks a user/password for authentication. checkAuthorization() matches a stored authorization such as a cookie.

viavianci

Hi there, I still have the same problem:

If I visit the plain HTML site, click on my login form, submit the correct user details --> I get the user + password form from Zen, the cookie appears not to be set.

If I then click on the same login link and try again, I get logged in and the cookie is set.

My code is as follows - I feel I'm really close to the solution so I hope you can help me wrap things up!

<?php

require_once("lib-utf8.php");
require_once("functions-db.php");

$post_user = $_POST["user"];
$post_pass = $_POST["pass"];

if(checkLogon($post_user, $post_pass))
{
setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, "/");
header('Location: http://www.mysite.com/zenphoto/' . $post_user);
}

else
{
setcookie("zenphoto_auth", "", time()-368000, "/");
header('Location: http://www.mysite.com/login-failed.html');
}

?>

sbillard

Please try this with the current nightly build. I did find a problem where session information was getting set empty somehow. I have changed the authorization process to ignore empty session autorization codes so it should fetch the cookie properly.

viavianci

Hello - the current nightly build (27th July) didn't fix this problem either. Any other suggestions?

sbillard

You need to figure out if your cookies are getting sent. If so, make sure the endocing in the cookie matches the auth in the administrators table.

viavianci

Hi there,

I modified the code slightly:
`

if(checkLogon($post_user, $post_pass))

{

setcookie("zenphoto_auth", md5($post_user . $post_pass), time()+5184000, "/");

$_zp_loggedin = checkAuthorization(zp_getCookie('zenphoto_auth'));

if ($_zp_loggedin) {

header('Location: http://www.mysite.com/script/' . $post_user);

}

}

`
This results in a blank screen which means the cookie is not being set on the first attempt but does get set on subsequent attempts - I don't understand why this happens!

sbillard

I have figured it out. Basically, the cookie does not cross web boundries. I have created a hack that will do what you wish. http://www.zenphoto.org/2008/07/zenphoto-single-login/

viavianci

The hack works perfectly, thanks for all your help over the last few days. I'll try and find your email address to send you the URL to the finished site.

p.s. http://www.zenphoto.org/2008/07/zenphoto-single-login/ < I had some problems copying and pasting the code, there's some formatting errors on the page

acrylian

Sorry about the formatting problems, it always can be problematic pasting code from the site (and the forum). We will attach that as a file download later.