These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

Integrated CMS and API System Questions. 500mil reward.
Author
Previous Topic Next Topic
Az Tek
Overheat.Everything
#1 - 2012-12-26 00:31:34 UTC
I'm going to try this again but start from the beginning and go through each issue as the one before is resolved.

I have never played with the API system before. I have a firm grasp on programming in many language so picking it up won't be to hard I don't think. With this being said I am looking for someone/s that can help me with this issue. I will be happy to give you 500mil for doing so.

I saw a post similar to this the other day but did not explain any of my questions. I would like to integrate the API system into my website. Maybe used as a Content Management System. My main goal is for a user to be able to register on the website using their API credentials. It will ask for Username and Password as well as both ID vCode. Once they are registered they will be able to log in via this account name and password. Now, I need this account that they have created to be saved to the database containing the char info that I choose to query for. Thus also allowing me to create profiles on the site simply for commenting as their EVE char.

Any help on this would be appropriated and again I will give 500mil to the person who can help me with this. I tried to give as much info as possible to give you the best idea of what i need but for a more specific details please just ask. Thanks in advance.

Fight, Fly, Crow... Bangerang
Peter Powers
Terrorists of Dimensions
HORSE-KILLERS
#2 - 2012-12-26 09:18:25 UTC
Az Tek wrote:
I'm going to try this again but start from the beginning and go through each issue as the one before is resolved.

I have never played with the API system before. I have a firm grasp on programming in many language so picking it up won't be to hard I don't think. With this being said I am looking for someone/s that can help me with this issue. I will be happy to give you 500mil for doing so.

I saw a post similar to this the other day but did not explain any of my questions. I would like to integrate the API system into my website. Maybe used as a Content Management System. My main goal is for a user to be able to register on the website using their API credentials. It will ask for Username and Password as well as both ID vCode. Once they are registered they will be able to log in via this account name and password. Now, I need this account that they have created to be saved to the database containing the char info that I choose to query for. Thus also allowing me to create profiles on the site simply for commenting as their EVE char.

Any help on this would be appropriated and again I will give 500mil to the person who can help me with this. I tried to give as much info as possible to give you the best idea of what i need but for a more specific details please just ask. Thanks in advance.

basically its not a good idea to auth just by the details you mentioned, since you cannot be sure that who ever is having that API key is indeed in control of the account. So you will need to either have the owner of the key send a confirmation evemail to your account (which you then can read through your own API key) or an amount of ISK - otherwise anyone who has someones api key can fake being that person.

everything else you need to do should be quite obvious for someone with a "firm grasp"

- you have a form where the user enters his data
- you sanitize the data to ensure no injection happens
- you use your database to store the data
- you make a cron which regulary checks your own API for the confirmation (see text above)
- once API is confirmed you save an active status to your database
when someone wants to login, you check if username + password is available, and fetch a character list from the (active) API keys. (make sure you don't cache that list for too long or it wont handle character transfers well)


OR
as i already posted in the other thread: wait till OAUTH2 is available which is actually made for stuff like this.

3rdPartyEve.net - your catalogue for 3rd party applications
Joepopo
Worthless Carebears
The Initiative.
#3 - 2012-12-26 15:49:39 UTC  |  Edited by: Joepopo
What you want to do already exists and is open source:
www.github.com/madcowfred/evething

If you want to do your own you can always inspect the sources to see how it s done.
Joepopo
Worthless Carebears
The Initiative.
#4 - 2012-12-27 19:04:57 UTC
I miss my 500 million