Question : Automatically log into websites programmatically

Hi Experts,

I am looking for the best way to log into supplier websites automatically without exposing the username and password to our end user.

What we have is a web application that 300 odd consultants log into individually and use as a virtual office resource.

When they leave we cut their access to our web application

One problem we face is that some of websites that we have accounts with will only allow a single agency logon that would be granting access to all 300 of our consultants. The problem is when a consultant leaves we have to make a decision to change the password for all these sites.

What we would like to do is be able to control access to these sites by way of a link in our web app that logs the consultant in to the website without them having to know the username and password.

Ideally it would be nice to find out what the form vars are and just simply post to the suppliers website but I think it is going to be more complicated than that?

We have our own linux web servers in a data center so we can install anything we need to. Currently the web app is programmed in PHP. We are thinking maybe the CURL road perhaps?

Any suggestions would be greatly appreciated.

Answer : Automatically log into websites programmatically

evilbit@evilbit01 ~ $ nslookup youtube.com
Server:            216.87.64.2
Address:      216.87.64.2#53

Non-authoritative answer:
Name:      youtube.com
Address: 74.125.95.93
Name:      youtube.com
Address: 74.125.127.93

config

access-list 102 deny ip  host 192.168.0.12 host 74.125.95.93
access-list 102 deny ip  host 192.168.0.12 host 74.125.127.93
access-list 102 permit ip  any any

interface FastEthernet0/0
ip access-group 102 in


Note, DNS results might be different based on geographical location, so ensure that you check to ensure the IP addresses are the same, if not, update accordingly.

Billy