Sharing of the community

[Gidgidonihah]

Now, I haven't looked at the code to smf yet, but depending on how they handle inserting a new user into the database, it could be quite easy.

All we would have to do is hack the code a little bit (a single function with any luck) to put it in the local database as well as connect to a remote database (the other forum) and input the user info there.

What do you say latro?

[Jedakiah]

Pardon my ignorance, I'm here to learn.  But can you make it secure (I mean REALLY secure)?  You are sending passwords over the web to a remote location.  And obviously that can be bad news if isn't secured like it should be. 

[Gidgidonihah]

Well first of all the passwords are stored in an md5 hash, so you're not really sending the password, you're sending the hash of the password, and second, you could send it over an encrypted connection, which would of course make the entire process even slower.

[Jakestaby]

Hosting both forums on the same box would solve the problem.

[Jedakiah]

Well first of all the passwords are stored in an md5 hash, so you're not really sending the password, you're sending the hash of the password, and second, you could send it over an encrypted connection, which would of course make the entire process even slower.

I knew they were stored as a hash, but those are certainly not bulletproof.  When sending information like ADMIN passwords (particularly the ROOT ADMIN who might be dumb enough to use the same password for the site, no offense Latro) you need to be extra careful.  I have read about this being a large security vulnerability in PHP. One that should be protected against. 

It may be nearly impossible to exploit though.  I don't know.  Ask Jake. 

Jake's idea is great one.  If you did this you should try that. 

[Jakestaby]

Unless someone is sniffing traffic on either side or somewhere along the way and knows what to look for.

[Labyrinthine]

Like Jake 

[Jakestaby]

And I will use any information maliciously.

[Jedakiah]

When that day comes do me a favor, give Killa the ability to read only. 

[The Grandfather]

Whats that supposed to mean?

[Jedakiah]

You can't post, but you can still read the forums. 

[Gidgidonihah]

Wouldn't that be great.

Yeah, hosting on the same box would work, but I'm not running our server so I'd have to mediate that between latro and the camel...

[Jakestaby]

Is your server with a webhost like Latro's?  Or is he hosting it?

[Gidgidonihah]

That, I do not know.