Login to 2 sites with one form?

[Guest]

I need to log into 2 parts of my site. Users log into our main site. They log in and a welcome page loads. Then they can hit a continue button to submit hidden username and password to our cartweaver store. The problem is getting the login info to get submitted properly to the Cartweaver store without being typed. I think the form action isn't quite right.

Bob

[Dan_Bracuk]

What happens when you cfdump the form on the page that accepts processes it?

[Guest]

I don't. I submit it as hidden fields to the next form and it crashes because Cartweaver's action page varies. I haven't used cfdump.

Bob

[Guest]

I sort of worked it out. There is a query in the customeraction page that
looks a little like this(after modifying a tad):

<cfquery name="rsGetCustomer" datasource="#your.DSN#"
username="#your.username#" password="#your.password#">
SELECT cst_ID, cst_ShpCity
FROM tbl_customers
WHERE cst_Username = '#form.Username#' AND
cst_Password = '#form.Password#'
</cfquery>

I added it to the welcome page in my site that users are directed to after
loggin in. I then submit their username and password to the orderform.cfm
page as hidden fields in a form on the welcome page with a submit button and
it successfully passed the information to CW.

Bob

[Dan_Bracuk]

Storing passwords in plain text is not very secure. It's a good idea to encrypt or hash them first. Encrypting will enable you to decrypt it if you want to offer a forgotten password feature. There is no de-hash function of which I am aware.

[Guest]

It is all ssl. Is that enough with https?