Part of the EllisLab Network
   
 
Encrypt and URL disallowed characters - alphanumeric option?
Posted: 05 October 2008 09:23 AM   [ Ignore ]  
Grad Student
Avatar
Rank
Total Posts:  34
Joined  09-14-2008

I am constructing an autologin process whereby restricted users on a site receive an email with a url containing controller/function/encrypted_name/encrypted_password.


I want to avoid allowing more characters in $config[‘permitted_uri_chars’]

Is there a way to restrict the encryption to alphanumeric characters only?

thanks,

anton

 Signature 

” ...the announcement of a vast project is always its betrayal” - Bataille

Profile
 
 
Posted: 05 October 2008 09:44 AM   [ Ignore ]   [ # 1 ]  
Grad Student
Avatar
Rank
Total Posts:  34
Joined  09-14-2008

It seems that it’s only using + and = and after reading

http://www.derekallard.com/blog/post/passing-disallowed-characters-through-the-url-in-code-igniter/

I figure this would be ok.

unless anyone has a better idea?

anton

 Signature 

” ...the announcement of a vast project is always its betrayal” - Bataille

Profile
 
 
Posted: 05 October 2008 11:13 AM   [ Ignore ]   [ # 2 ]  
Research Assistant
Avatar
RankRankRank
Total Posts:  426
Joined  10-22-2007

I’m confuse what exactly you want.

I want to avoid allowing more characters in $config[‘permitted_uri_chars’]

then add all characters you want

Is there a way to restrict the encryption to alphanumeric characters only?

don’t use dohash use random generator function can only give you alphanumeric

 Signature 

Blogmer - Open source blogging software based on codeigniter
Blogmer Documentation
Web Design company and FREE PHP MySQL Webhosting

Profile
 
 
Posted: 05 October 2008 11:22 AM   [ Ignore ]   [ # 3 ]  
Administrator
Avatar
RankRankRankRankRank
Total Posts:  3097
Joined  01-07-2008

While I don’t approve of the auto-login idea (use a remember-me cookie instead), my solution would be this.

[EDIT: On second thought, my solution would be to add it as a GET parameter]

 Signature 
Profile
MSG
 
 
Posted: 06 October 2008 04:49 AM   [ Ignore ]   [ # 4 ]  
Grad Student
Avatar
Rank
Total Posts:  34
Joined  09-14-2008

Ah, that’ll do it.

thanks Inparo

btw:auto-login isn’t something I’d consider usually but it’s a restricted set of users connecting to a non-public site where they subsequently login/register for another level of access.

The autologin url is sent as a link via email

 Signature 

” ...the announcement of a vast project is always its betrayal” - Bataille

Profile