cotonti.com : Facebook Plugin?

tensh

Pzt, 04 Nis 2011 09:08:10 -0000

I would be very grateful :) BTW, the Facebook buttons doesn't work in IE8?

Added 9 minutes later:

Offtopic - I'll soon contribute many plugins and some tutorials. Like: youtube importer, how to make youtube gallery from pages, featured content slider using nivo slider (and page avatar plugin), custom filter in lists, etc. I just have to finish my current work and correct some bugs. Cotonti is great :)

Trustmaster

Cum, 01 Nis 2011 11:12:37 -0000

I have to test it somewhere. This site doesn't use that plugin currently.

tensh

Cum, 01 Nis 2011 10:13:32 -0000

Hi,

Did anybody solve the problem with logouts?

I have to click the facebook logout button twice in order for it to logout. Can this be something about javascript?

Trustmaster

Per, 20 Oca 2011 20:57:32 -0000

FaceBook actually uses HMAC. It protects the auth data from getting sniffed and decomposed. But I need to investigate if it helps from XSS, because an XSS attacker does not decompose anything, he just uses the cookie as it is.

Even if does not protect from XSS, it might be a good improvement because it is more reliable than current mechanism based on random session identifiers.

Added 26 minutes later:

Something what we forgot of:

Wikipedia:
Another mitigation present in IE (since version 6), Firefox (since version 2.0.0.5), Safari (since version 4) and Google Chrome, is a HttpOnly flag which allows a web server to set a cookie that is unavailable to client-side scripts. While beneficial, the feature does not fully prevent cookie theft nor can it prevent attacks within the browser.

We've been using HttpOnly flag for quite long time. So, I think that for most sites ipcheck can be disabled by default and enabled on sites where security is much more important than user comfort (e.g. banking, e-stores, etc.).

Another thing to allow logins from multiple devices is using HMAC instead of random session keys (because such random keys are often changed).

GHengeveld

Per, 20 Oca 2011 19:25:43 -0000

I'm pretty sure it's IP check. On other sites I have it disabled and there it works fine.
Strangely it usually works fine when tethering mobile's 3G to my notebook, using the notebook for browsing, but on mobile itself, or on iPad (3G) it mostly keeps logging out. It differs though, because sometimes it works fine on mobile as well. I guess it's just a matter of what mobile broadcasting station I'm connected to. As long as it's the same one the IP doesn't change. At least that's my explanation. This morning I was on a train so it makes sense that the IP keeps changing.

A collegue suggested looking into HMAC for authentication, which doesn't require a DB query, but maybe that only works for always-running scripts like Python.

Trustmaster

Per, 20 Oca 2011 17:28:20 -0000

That probably might be caused by IP changing frequently. It would be nice if we knew for sure if these logouts are really caused by IPcheck. I have uploaded a fix for this redirect problem, let me know how it works now.

GHengeveld

Per, 20 Oca 2011 16:29:23 -0000

Just wanted to say the facebook thing has an issue. If I'm on mobile (which would normally mean I'd keep logging out), the FB plugin apparently logs me back in every time, but it always redirects back to the last page I was on. The effect of this is that I can no longer visit any page except that one page, because if I visit another page, I will be logged out, logged back in again by FB connect, and redirected back to the page I was on before.

Trustmaster

Per, 20 Oca 2011 15:32:39 -0000

Try this:


{HEADER_DOCTYPE}






http://www.cotonti.com" />




{HEADER_HEAD}
{HEADER_BASEHREF}


{HEADER_COMPOPUP}
{HEADER_TITLE}




    
        
            
                

	                 
                    {PHP.L.Login} • {PHP.L.Register} • {PHP.skinlang.header.Lostyourpassword}
                    {PHP.skinlang.header.Welcome}
{FB_LOGIN}
	                

	                
                    {HEADER_USER_LOGINOUT}
                    {HEADER_LOGSTATUS}
                    {HEADER_USER_ADMINPANEL} | {HEADER_USERLIST} | {HEADER_USER_PROFILE} | {HEADER_USER_PFS} | {HEADER_USER_PMREMINDER}
{HEADER_NOTICES}
	                

                
                
                    {PHP.cfg.menu1}
                    {PHP.L.Home}

But it won't work anyways because you have not registered your site as FaceBook application and have not filled AppId config.

barkerb23

Per, 20 Oca 2011 07:24:00 -0000

same thing. heres my header.tpl plz fix it


{HEADER_DOCTYPE}






http://www.cotonti.com" />




{HEADER_HEAD}
{HEADER_BASEHREF}


{HEADER_COMPOPUP}
{HEADER_TITLE}




    
        
            
                

	                 
                    {PHP.L.Login} • {PHP.L.Register} • {PHP.skinlang.header.Lostyourpassword}
                    {PHP.skinlang.header.Welcome}
	                

	                

{FB_LOGIN}
{FB_LOGOUT}
{FB_LOGIN_REGISTER}
{FB_LOGIN_URL}
{FB_LOGOUT_URL}
{FB_REGISTER_URL}
                    {HEADER_USER_LOGINOUT}
                    {HEADER_LOGSTATUS}
                    {HEADER_USER_ADMINPANEL} | {HEADER_USERLIST} | {HEADER_USER_PROFILE} | {HEADER_USER_PFS} | {HEADER_USER_PMREMINDER}
{HEADER_NOTICES}
	                

                
                
                    {PHP.cfg.menu1}
                    {PHP.L.Home}

Trustmaster

Per, 20 Oca 2011 05:36:02 -0000

You have inserted that tag into . What I meant is editing the existing tag on top of the template by adding the {FB_XMLNS} part to it.

barkerb23

Per, 20 Oca 2011 04:58:35 -0000

just did. still messed up. login ar www.pspcextreme.hostzi.com with:
Username: demo
Password: demo

Trustmaster

Per, 20 Oca 2011 03:39:06 -0000

In header.tpl make sure you have XML namespace set:

and don't forget the actual login button {FB_LOGIN}. There are several other tags depending on what kind of buttons you want to use or construct yourself. More button options may be found in FB developer docs.

barkerb23

Per, 20 Oca 2011 03:18:01 -0000

thanks. i tried it but look

www.pspcextreme.hostzi.com

Added 6 minutes later:

its messed up in the header. but when i pause the header, i get an error

Trustmaster

Sal, 18 Oca 2011 18:58:54 -0000

It logs you in automatically if it finds an existing facebook connection linked to your Cotonti account.

Added 8 hours 23 minutes later:

Well, guys, current version is ready for testing. You can grab it here.

What this plugin enables your visitors to do:

Login to your site using their FaceBook account
Register new account on your site with some fields prefilled by FaceBook
Link existing account with FaceBook account
Logout from both your site and FaceBook (separate logout is not technically possible if accounts are linked and logged in)

Notice that you have to register your site as FaceBook application in order to use it. FB developer docs are located here. Apart from installing the plugin and filling the configuration (AppId, Secret), don't forget to put tags into your header.tpl.

GHengeveld

Sal, 18 Oca 2011 18:38:37 -0000

Logging out from Facebook should fix that.

I wonder if using FBconnect also fixes the issue of getting logged out when using a mobile phone connection.

Trustmaster

Sal, 18 Oca 2011 17:17:38 -0000

Yes, this is because fbconnect logs you back again when you logout with Cotonti. I'll fix it a bit later.

Kort

Sal, 18 Oca 2011 15:51:12 -0000

I don't have probs

pieter

Sal, 18 Oca 2011 14:38:49 -0000

Since the plugin is here on the site, I can't logout.
If I click logout, I get to the homepage BUT still logged in.

Trustmaster

Sal, 18 Oca 2011 06:29:25 -0000

It is actually FaceBook Connect plugin which I'm currently developing and testing on this site. Built with latest FB API, it will be finally available for download after I complete it.

Kingsley

Sal, 18 Oca 2011 06:16:35 -0000

http://www.cotonti.com/downloads/plugins/users-communites/loginza?highlight=FACEBOOK

barkerb23

Sal, 18 Oca 2011 05:51:35 -0000

where can i get a "login with facebook" plugin for my site as i see one here on cotonti? i heard people talking about it last year but has it been completed?

Added 28 seconds later:

cotonti.com : Facebook Plugin?

tensh

Trustmaster

tensh

Trustmaster

GHengeveld

Trustmaster

GHengeveld

Trustmaster

barkerb23

Trustmaster

barkerb23

Trustmaster

barkerb23

Trustmaster

GHengeveld

Trustmaster

Kort

pieter

Trustmaster

Kingsley

barkerb23

thanks in advance