Hall of Fame

1. richrumble95,281
2. DaveHowe81,572
3. Paranorm...79,841
4. PowerIT56,312
5. Admin3k52,030
6. CoccoBill44,484
7. jakopriit37,102
8. ahoffmann35,975
9. Mestha33,300
10. uetian170730,517
11. MikeHolcomb27,567
12. xmachine26,906
13. rpggamer...26,598
14. Tolomir26,324
15. warturtle25,086
16. dstewartjr24,050
17. mkline7121,400
18. Kelvin_King19,932
19. aleghart19,783
20. jahboite19,300
21. lrmoore16,939
22. dpk_wal16,325
23. johnb676716,212
24. Ray_Pas...15,730
25. sarangk_1415,568

1. richrumble766,808
2. PowerIT386,809
3. Sheharya...371,467
4. Tolomir344,674
5. rpggamer...338,864
6. war1296,462
7. ahoffmann286,312
8. r-k266,691
9. tim_holman175,246
10. DaveHowe171,904
11. lrmoore161,874
12. CoccoBill154,131
13. sunray_...121,147
14. decoleur115,226
15. jakopriit113,945
16. rsivanandan102,611
17. PeteLong99,498
18. Paranorm...98,593
19. chicagoan93,255
20. KCTS92,205
21. SunBow91,148
22. younghv82,520
23. kbbcnet73,468
24. Admin3k73,426
25. sirbounty71,839

	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.4

Security in an framed web application using SSL

Asked by flatfoot64 in Miscellaneous Security, IPSec Security Protocol

Tags: iframe, ssl, application, hidden, security

A third party application runs within an IFRAME on our company's site. The following steps describe the process used to log in to this third patry application directly from our home page. Is this a secure process?

1. The user enters their user name and password into the form fields on our home page.
2. They click the Go button or hit the enter key.
3. The location of a hidden IFRAME is set to a secure page on our site: https://www.ourcompany.com/secure/company/frame.asp
4. When that secure page loads (onLoad event), java script moves the user name and password from the home page form to fields in a form in the hidden IFRAME.
5. The form in the hidden IFRAME is submitted to a secure page:
https://www.thirdparty.com/security/login.asp.
This logs the user into the third party application inside the IFRAME and stores an authentication cookie from the third party application.
6. After the page loads into the hidden IFRAME indicating that the user has logged into the third party application, the onUnload event in the BODY of the IFRAME document fires.
7. That event sets the parent documents location to a page on our site and the browser navigates there.
8. This page itself contains an IFRAME that in turn contains a page that redirects to the main menu page of the third party application: https://www.thirdparty.com/menu.asp
9. The user's info for the third party application then appears within the IFRAME within our page.

View the Solution FREE for 30 Days

20091021-EE-VQP-81

Security in an framed web application using SSL

Asked by flatfoot64 in Miscellaneous Security, IPSec Security Protocol

Tags: iframe, ssl, application, hidden, security

About this solution