Session Export

[kwinsor5]

Hey phpBB community! I have a small potential project that requires hooking into the phpBB session so users don't have to log in twice (and more importantly so the authentication is off my hands). My main IT contact for the project mentioned phpBB offers a "session export" functionality so something like a .NET web application can take control of a token. I'm not seeing anything like this in the documentation/wiki, so can anyone confirm that this functionality exists? If it doesn't, it looks like I may have to learn some PHP unless anyone more familiar with phpBB can think of a solution that I am not

-Kenny

[Senky]

You can read user cookie and compare to database sessions table.

[kwinsor5]

Which database are you referring to? From the information I've gotten from our client, the server that hosts the MySQL database for the existing website does not allow any external connections. I suppose the information contained in the cookie could be enough to work off of though...

[Senky]

Cookie contents is just random string. You need to match this string to sessions table of phpBB's database to fetch user data and eventually log him in or whatever you are trying to achieve.

[3Di]

I think Senky is speaking about the cookie "phpbb3_blah_sid" wich contains the session id of the user, to be compared to the user "session_id" of the SESSIONS_TABLE.