Recommended Posts

Neowin coders / members / project leaders,

We've developed a system to allow external projects in-directly linked to neowin to authenticate users in a secure manner. Based around a ticket system, you can now check if a user says who they are. Below you can find demo code, and a more advanced explanation of how the system works. If you have any feedback on the system, please post below. The data we return to sites (username, user group, email) is subject to change. Equally, the use of this system is conditional on the pledge that you agree not abuse the information given to you. The system was designed and built by our very own Timdorr (you can thank him via a PM :) ).

Explanation of the system

An effective system for validating members can be done via tickets. Essentially, it's a 3 stage process.

1. You require a visiting user to prove they are who they say they are (with relation to their neowin membership). You forward them to us (www.neowin.net/login/?url=yoururl.com). Here, they enter username and password.

2. If they enter the correct info, we'll return the user to your site with a ticket. With this ticket, you can now access neowin asking for validation (see example code below). This ticket is only valid for 60 seconds (security measure).

3. If the ticket is invalid (for whatever reason) we'll return the data "no". If it is valid, we'll return the following data : username, email address, group information (e.g. banned, normal, moderator).

From this, you can then proceed with whatever activites the user wants to do on your site, safe in the knowledge that they are who they say they are.

Example Code

<?php
//Neowin Login Tool example code, coded by Sietse and offered freely for use by Neowin.net
// Send the user to login if no ticket is found
// ----------------------------------------------
//enter your url below - the location of this script - e.g. www.mysite.com/
$myurl = 'http://www.sietse.nu/neowin/';

if(empty($_GET['ticket']))
{
 ? ?header('Location: https://www.neowin.net/login/?url=' . $myurl);
}
else
{
	// Check ticket
	// -----------------
	$info = ?explode("\n", file_get_contents('https://www.neowin.net/login/checkticket.php?ticket=' . $_GET['ticket']));

	if($info[0] == "no")
	{
 ?echo "Sorry, you could not be logged in, check your username and password.";
	}
	else
	{
 ?// Succesfully logged in, display the given content
 ?// -------------------------------------------------
 ?echo "You've been succesfully logged in..\n
 ? ?<br /><br />\n<strong>Username:</strong> " . $info[1] . "<br />\n
 ? ?<strong>E-mail:</strong> " . $info[2] . "<br />\n
 ? ?<strong>Group:</strong> " . $info[5] . "<br />\n
 ? ?<strong>Member ID:</strong> " . $info[4] . "<br />\n
 ? ?<strong>Time Offset:</strong> " . $info[3];
	}
}

?>

An example of the system can be found here : here

Please feel free to leave feedback below, as well as links to sites that you've impUPDATE FEB 1, 2009: FEB 1, 2009:

We've made some changes to the script. The biggest thing is that it now uses the Finity style, and offers more details. Generally, it feels better.

The other thing is for developers of Neowin-based services. You can now pass &img=http://mydomain.com/neowin-login.png on the login URL, and that image will appear at the top left of the site, like so: https://www.neowin.net/login/?img=http://ww...ser%2Fticket%2F

It offers that extra bit of branding and clarity to the user.

The image you use should be 48px high, and only as wide as you need. There should be 2 or 3 pixels of padding around the image, so really the height is about 42px. Make sure it is a transparent PNG, so our background can be seen through it. Remember, you're branding Neowin, it :ptter look nice :p

Link to comment
https://www.neowin.net/forum/topic/211388-neowin-external-login-tool/
Share on other sites

Ok this should work. Good job

One question/suggestion...

Could you return the Neowin MemberID also, so on our apps we can link to this:

https://www.neowin.net/forum/index.php?showuser=MemberID

to display the Neowin Profile page for the user?

Lots of users were asking for the ability to look at another Users Neowin profile from within NeoRequest.

This would definitely help out!

Ok, well others can speak up when they use it, but I will plan so that as long as you append to the end, it should be ok.

But if you change the label in the front...well then I can see a break. :)

Thanks for helping us with this feature!

one more change: I realize now that people, such as Mr Magoo, have spaces in their names. I've switched it to newline deliminated, so that people with weird characters don't cause a problem :)

Nothing about people who are weird characters though, they'll still cause problems. :)

Awesomeness. I'll have to give this a shot for Neomap.

Cool, I was trying to forward this link to you, but Neowin was acting weird, and I didn't get around to it. I thought you might be able to use this too!

Cool, I was trying to forward this link to you, but Neowin was acting weird, and I didn't get around to it. I thought you might be able to use this too!

Well it wasn't exactly what I was looking for, but I'm sure I could modify it for my needs :)

Timdorr, would I be able to get the complete user group list?

OK timdorr...

I'm not sure if anyone else is using this yet or not, but maybe something we could put in here to make things a little bit easier...

Could we put begin and end character strings to signify begin of data and end of data. I'm just trying to recommend a standardized mechanism. It's currently possible to get the data, but it would be really easy if we can look for certain characters or delimiters so to speak.

Hmm...Just something that could/would be consistent.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • My issue is I can't access the forum on mobile if the site is set to Desktop mode on Vivaldi because it can't complete the Cloud flare am I a bot check! I know this is a Vivaldi issues as it has started happening on all cloud flare check sites, it's so annoying, I've reported it but no fix yet.
    • Are you going to do performance benchmarks comparing all states? I'd be interested in seeing that in the next "part".
    • My father still uses a programme written in dbase3. Still manages to work with a little help from dosbox. 
    • Microsoft hides these secret Windows 11 performance boost settings available on every PC by Sayan Sen Windows enthusiasts often look for ways to extract as much performance out of their systems as possible, and it's often the case that they try and do so while trying to minimize the heat and power consumption. This is especially relevant in the case of mobile Windows PCs since laptops and notebooks tend to get hot and management of that heat and power is harder in such a form factor. As such users often turn to techniques like under-volting which can be used to squeeze out the maximum capabilities of a chip while also maintaining lowered power levels. There are official apps from AMD and Intel with the likes of Ryzen Master and XTU (Extreme Tuning Utility). While these are quite handy, most enthusiasts probably prefer to dig into the BIOS and play around with settings there like Curve Optimizer on Ryzen, which lets users set various frequency-voltage scaling values. These are essentially called P-States. If you are not familiar with them, Processor Power Management is done through Advanced Configuration and Power Interface (ACPI) P-states and C-states. While P-states or performance pwoer states handle CPU voltage-frequency scaling, C-states deal with CPU sleep states so that some of the CPU functions, which are not necessary at that moment, can be disabled. The P-states and C-states work together to make the processor run more efficiently. It helps the OS and apps determine which cores can be parked and which should be boosted. Of course not every user is an enthusiast or knows the technicalities and integrities of how things like overclocking or undervolting work. Thankfully for them Windows itself offers something pretty cool, though it is hidden by default on all systems. By default, Windows only has two P-States, "Minimum Processor State" and "Maximum Processor State." However, this can be changed with a Registry trick to expand the options under a secret "Processor performance boost mode" dropdown. This essentially enables the HWP or hardware P-States available on a device, and these are not controlled just by the OS itself as the underlying hardware gets involved too. In total there are five Processor Performance Boost Mode profiles that control how Windows requests and allows CPU turbo/boost behavior under the different power policies. They are: Disabled: In this mode, processor boosting is effectively turned off. The CPU will avoid entering turbo or boost frequencies and instead operate closer to its base frequency ceiling. This can significantly reduce power consumption and heat output, but at the cost of reduced burst performance and responsiveness in short workloads. Enabled: This is the standard behavior where boost functionality is allowed under normal conditions. The processor can opportunistically increase frequency when workload demands it, balancing performance gains with power and thermal constraints as managed by the system. Aggressive: Aggressive mode favors performance more heavily, allowing the CPU to enter higher boost states more readily and sustain them longer. This should in theory improve responsiveness under bursty or heavy workloads but increases power draw and thermal output compared to the default enabled behavior. Efficient Enabled: This mode still allows boosting, but with a stronger bias toward energy efficiency. The system attempts to use boost more selectively, avoiding unnecessary frequency spikes when the performance gain is marginal. Efficient Aggressive: This is a hybrid approach where boost is still performance-responsive, but the system continuously weighs efficiency more heavily than in Aggressive mode. It aims to deliver noticeable performance improvements while reducing wasted power in less demanding scenarios. Here's how to enable the Processor performance boost mode: Open Registry Editor: Press Win+R, type regedit, and click OK. Go to: HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\be337238-0d82-4146-a960-4f3749d470c7 (where HKLM stands for HKEY_LOCAL_MACHINE_) Modify the value of Attributes from 1 to 2 (you can find modify option by right-clicking) After that, exit Registry, you should now be able to see the new "Processor performance boost mode" dropdown menu: As you can see there are now five new P-States or CPPC states or power profile available that help define the boost mode processor setting on your PC. Wrapping it up here's a quick run-down of the settings as defined by Microsoft itself. Setting Description Disabled The corresponding P-state-based behaviour is disabled. Collaborative Processor Performance Control (CPPC) behaviour is disabled. Enabled The corresponding P-state-based behaviour is enabled. CPPC behaviour is Efficient Enabled. Aggressive The corresponding P-state-based behaviour is enabled. CPPC behaviour is Aggressive. Efficient Enabled The corresponding P-state-based behaviour is Efficient. CPPC behaviour is Efficient Enabled. Efficient Aggressive The corresponding P-state-based behaviour is Efficient. CPPC behaviour is Aggressive. Aggressive At Guaranteed Windows calculates the desired extra performance above the guaranteed performance level, and asks the processor to deliver that specific performance level. Efficient Aggressive At Guaranteed Windows always asks the processor to deliver the highest possible performance above the guaranteed performance level. In the next part we shall be comparing these settings to explore how much of a benefit or regression they can provide in terms of performance and power efficiency. If you decide to change the values on your system and are experiencing problems like crashes or an overheating PC, make sure to revert the steps back to the original state.
  • Recent Achievements

    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
    • One Month Later
      agatameier earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      518
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      ATLien_0
      93
    5. 5
      Steven P.
      78
  • Tell a friend

    Love Neowin? Tell a friend!