1.准备两个虚拟域名
127.0.0.1 www.a.com
127.0.0.1 www.b.com
2.在a的根目录下创建以下文件
1 //index.php
2
3 <?php
4 session_start();
5 ?>
6 <!DOCTYPE html>
7 <html>
8 <head>
9 <meta charset="UTF-8"/>
10 <title>sync login</title>
11 </head>
12 <body>
13
14 <?php if(empty($_SESSION['username'])):?>
15 <p>hello,游客;请先<a href="login.php">登录</a></p>
16 <p><a href="http://www.b.com/index.php">进入空间</a></p>
17 <?php else: ?>
18 <p>hello,<?php echo $_SESSION['username']; ?>;<a href="http://www.b.com/index.php">进入空间</a></p>
19 <?php endif; ?>
20 <a href="http://www.a.com/index.php">home</a>
21 </body>
22 </html>
23
24 //login.php
25 <?php
26 session_start();
27 if(!empty($_POST['username'])){
28 require './Des.php';
29 $_SESSION['username'] = $_POST['username'];
30 $redirect = 'http://www.a.com/index.php';
31 header('Location:http://www.a.com/sync.php?redirect='.urlencode($redirect).'&code='.Des::encode($_POST['username'],'a'));
32 exit;
33 }
34 ?>
35 <!DOCTYPE html>
36 <html>
37 <head>
38 <meta charset="UTF-8"/>
39 <title>sync login</title>
40 </head>
41 <body>
42 <form action="" method="post">
43 <input type="text" name="username" placeholder="用户名"/>
44 <input type="text" name="password" placeholder="密码"/>
45 <input type="submit" value="登录"/>
46 </form>
47 </body>
48 </html>
49
50 //sync.php
51 <?php
52 $redirect = empty($_GET['redirect']) ? 'www.a.com' : $_GET['redirect'];
53 if (empty($_GET['code'])) {
54 header('Loaction:http://' . urldecode($redirect));
55 exit;
56 }
57
58 $apps = array(
59 'www.b.com/slogin.php'
60 );
61 ?>
62 <!DOCTYPE html>
63 <html>
64 <head>
65 <meta charset="UTF-8"/>
66 <?php foreach ($apps as $v): ?>
67 <script type="text/javascript" src="http://<?php echo $v . '?code=' . $_GET['code'] ?>"></script>
68 <?php endforeach; ?>
69 <title>passport</title>
70 </head>
71 <body>
72 <script type="text/javascript">
73 window.onload = function () {
74 location.replace('<?php echo $redirect; ?>');
75 }
76 </script>
77 </body>
78 </html>
79
80 //Des.php
81 //当在www.a.com登录后将session信息传到其他域名下的文件下进行处理，以script标签包含的形式进行运行。
82 <?php
83
84 class Des
85 {
86 /**
87 * 简单对称加密算法之加密
88 * @param String $string 需要加密的字串
89 * @param String $skey 加密EKY
90 * @return String
91 */
92 public static function encode($string = '', $skey = 'cxphp')
93 {
94 $strArr = str_split(base64_encode($string));
95 $strCount = count($strArr);
96 foreach (str_split($skey) as $key => $value) {
97 $key < $strCount && $strArr[$key] .= $value;
98 }
99 return str_replace(array('=', '+', '/'), array('O0O0O', 'o000o', 'oo00o'), join('', $strArr));
100 }
101
102 /**
103 * 简单对称加密算法之解密
104 * @param String $string 需要解密的字串
105 * @param String $skey 解密KEY
106 * @return String
107 */
108 public static function decode($string = '', $skey = 'cxphp')
109 {
110 $strArr = str_split(str_replace(array('O0O0O', 'o000o', 'oo00o'), array('=', '+', '/'), $string), 2);
111 $strCount = count($strArr);
112 foreach (str_split($skey) as $key => $value) {
113 $key <= $strCount && isset($strArr[$key]) && $strArr[$key][1] === $value && $strArr[$key] = $strArr[$key][0];
114 }
115 return base64_decode(join('', $strArr));
116 }
117 }
3.在www.b.com的根目录下创建如下文件
1 //slogin.php文件 完成session的设置
2 <?php
3 session_start();
4 header('Content-Type:text/javascript; charset=utf-8');
5 if(!empty($_GET['code'])){
6 require './Des.php';
7 $username = Des::decode($_GET['code'],'a');
8 if(!empty($username)){
9 header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
10 $_SESSION['username'] = $username;
11 }
12 }
13 ?>
14
15 //index.php
16 <?php
17 session_start();
18 if(!empty($_SESSION['username']))
19 {
20 echo "欢迎来到".$_SESSION['username']."的空间";
21 }else{
22 echo "请先登录";
23 }
24 ?>
4.此时访问www.a.com和www.b.com都是未登录状态
登录后两个域名下都是登录状态
到此我们实现了一个简单的单点登录。
