Quote:
Originally posted by SGS
Sounds interesting but how much trouble would it be to impliment?
|
Not really hard at all, since PHP and OpenSSL are fully intergrated. Just after the customer signs up they would need to load a unique certificate that is generated for them into the browser.
Then when they visited
https://www.somesite.com/login.php the certificate data would be retrieved and you could validate the session in mySQL and serve the content through normal http protocol.
The hard part would be to rewrite the API for the credit card processor to add/delete certificates from the access file when the membership is up.
V