Page 1 of 1

Authentication problem with third-party admin pages

Posted: Mon Mar 30, 2009 1:51 pm
by Torpedine
I have a new prolem that came out upgrafding from 1.2.x to 1.5.3.

I developed some admin pages to control a third-party database. Perfectly functioning, with an "admin DB" option in the content menu and so-on.

I have done incorporating in my page the frame of the other admin pages.

With the upgrade toCMSMS 1.5.3 my page do not work anymore, and selecting the "list db contents " the login windoe jumps up.

My question is: authentication is changed? even copying the code from, fro instance, "listhtmlblobs" the thing does not change.

Can someone help me? Thanks in advance....

Re: Authentication problem with third-party admin pages

Posted: Mon Mar 30, 2009 2:29 pm
by alby
Torpedine wrote: My question is: authentication is changed? even copying the code from, fro instance, "listhtmlblobs" the thing does not change.
Now, in 1.5.X there is a security code that you must have

Alby

Re: Authentication problem with third-party admin pages

Posted: Mon Mar 30, 2009 3:50 pm
by Torpedine
How can I add it to my pages?

Re: Authentication problem with third-party admin pages

Posted: Mon Mar 30, 2009 4:49 pm
by calguy1000
Create a proper module, and use the CreateLink method in the module api.  it handles all of that automatically.

Re: Authentication problem with third-party admin pages

Posted: Tue Mar 31, 2009 7:52 am
by Torpedine
I am not a developer, con someone show me an example?

Re: Authentication problem with third-party admin pages

Posted: Thu Apr 02, 2009 8:31 am
by Torpedine
please, help me, the thing is very important. i cannot leave the website without a part functioning

Re: Authentication problem with third-party admin pages

Posted: Thu Apr 02, 2009 12:54 pm
by Ted
The bit of code to append to the end of a URL is:

Code: Select all

$urlext='?'.CMS_SECURE_PARAM_NAME.'='.$_SESSION[CMS_USER_KEY];
However, if you're linking to stuff from outside CMSMS, it's not really going to work.  The whole point of this system is to not allow a security hack where someone can create a malformed URL and accidently change a site.

We're not the only ones doing this -- it's pretty common on most CMSs and web frameworks in general to not allow for outside links to affect a site.  It's for security.

Re: Authentication problem with third-party admin pages

Posted: Mon May 11, 2009 2:04 pm
by Torpedine
I'm sorry for the long delay.
I am not a developer: could you make an exaple of link made as you specified?

Thanks in advance and please forgive my clumsiness