Galène videoconferencing server discussion list archives
 help / color / mirror / Atom feed
From: Juliusz Chroboczek <jch@irif.fr>
To: Rob Dean <robdeanmzl@gmail.com>
Cc: galene@lists.galene.org
Subject: [Galene]  Re: Galène with PHP
Date: Tue, 02 Mar 2021 19:37:00 +0100
Message-ID: <874kht1jxv.wl-jch@irif.fr> (raw)
In-Reply-To: <CA+_U3xZq9jS05zbEz4HAQfX+oUAprigJR4uifQYPpHDzsTSP3Q@mail.gmail.com>

> I was wondering if it were possible to use Galène inside a PHP page, as we want
> to get our students to fill out some details before joining in, and we thought
> that we could use php SESSION cookies to check they've completed everything
> before letting them in.

Sure.  What you'll want to do depends on your security model, though.

The simplest, but least secure, would be to check your session cookie in
the galene.js file; look around line 2600, where it says

    document.getElementById('userform').onsubmit

This is easily gamed by the user (they can edit the source code in the
browser), but if the goal is simply to guide the students and has no
influence on their grades, it's probably good enough.

If, on the other hand, you want stronger security, you'll need to pass the
session cookie to the server and do the validation there.  You'll need to
add a parameter to the serverConnect.join method, pass the value within
the "value" field of the join message, and do the validation in the function
handleClientMessage in webclient.go.

-- Juliusz

       reply	other threads:[~2021-03-02 18:37 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <CA+_U3xZq9jS05zbEz4HAQfX+oUAprigJR4uifQYPpHDzsTSP3Q@mail.gmail.com>
2021-03-02 18:37 ` Juliusz Chroboczek [this message]
2021-03-02 20:48   ` Gabriel Kerneis
     [not found]   ` <CA+_U3xavep8nMpdY5Sg1VmDUf24UfT0nx4+xXB2Q=dcvo2iq5Q@mail.gmail.com>
2021-03-05 13:27     ` Juliusz Chroboczek
2021-03-05 15:56       ` Jeroen van Veen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://lists.galene.org/postorius/lists/galene.lists.galene.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=874kht1jxv.wl-jch@irif.fr \
    --to=jch@irif.fr \
    --cc=galene@lists.galene.org \
    --cc=robdeanmzl@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Galène videoconferencing server discussion list archives

This inbox may be cloned and mirrored by anyone:

	git clone --mirror https://lists.galene.org/galene

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V1 galene galene/ https://lists.galene.org/galene \
		galene@lists.galene.org
	public-inbox-index galene

Example config snippet for mirrors.


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git