Here is my tribute mention

Thank you to the Office of Web and New Media and University Relations at Missouri State University.

// Line 311
function mcecomment_init() {
    global $post;
    if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), "iphone") === false) {
        $loadJS = false;
        if (is_plugin_page()) {
        $loadJS = true;
        } else if (is_singular()) {
            if (comments_open() && ( !get_option('comment_registration') || is_user_logged_in() )) {
                $loadJS = true;
            }
        }
        if ($loadJS)
        	mcecomment_getInitJS();
    }
}

// Line 350
function mcecomment_loadCoreJS() {
    global $post, $mce_locale;
    if (is_singular() && (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), "iphone") === false))
    {
        if (comments_open() && ( !get_option('comment_registration') || is_user_logged_in() )) {
            wp_enqueue_script('tiny_mce', get_option('siteurl') .
            	'/wp-includes/js/tinymce/tiny_mce.js', false, '20081129');
            wp_enqueue_script('tiny_mce_lang', get_option('siteurl') .
                '/wp-includes/js/tinymce/langs/wp-langs-' . $mce_locale . '.js',
                false, '20081129');
            wp_deregister_script('comment-reply');
            wp_enqueue_script( 'comment-reply', get_option('siteurl') .
                '/wp-content/plugins/' . plugin_basename ( dirname ( __FILE__ ) ) .
                "/comment-reply.dev.js", false, '20090102');
        }
    }
}

Step 1: Step one is the initial request from the client to view a page that requires signing in. When the page receives it checks to see if the client is logged in. Login information is stored in a cookie which I will explain more in the last step. If they are logged in, they are allowed to view the page. Otherwise move to Step 2.

Step 2: Redirect the user to the CAS (Central Authentication Service) server. In the URL used for the redirection urlencode and pass the current webpage as a parameter in the url to the CAS server (Example: https://cas.brokenbytes.info/login/?service=http://admin.brokenbytes.info/index.php). This will be used later (in step 3). CAS provides a login page to the user where they can enter their credentials. If it fails, let them attempt it again. If validation is successful, generate a SSO Token ID (Example: 165asdefASD5). This is a unique token for this single sign on for the client. It will be used for only this session. In memory or a database associate the client with that token. Now move to Step 3.

Step 3: In step 3 the client has just been validated. In this step we need to redirect the user back to the Web Server, but first we must modify the URL to pass the SSO Token ID back to the Web Server. So something like this will be your redirect address: http://admin.brokenbytes.info/index.php?token=165asdefASD5.

Step 4: When the Web Server receives this request, it sees the token variable and then it knows to check the CAS server for its validity. This check to see if the token is valid is between the Web Server and the CAS Server. The client is not involved at all. In PHP you can do this by using file_get_contents(“https://cas.brokenbytes.info/login/validate?token=165asdefASD5″) or similar. If the CAS server replies with an okay, true, yes, etc response then you generate an encrypted cookie for the user to authenticate them. From this point forward they authenticate with the cookie until deleted or time out.

Notes: The SSO Token ID should only be valid for a few minutes or until used and then it should be unassigned.

Downfalls: Session hijacking can still happen because the cookie is stored on the clients machine.

SSO Diagram

So here I go:
It was spring break this week but I worked anway so I thought I would
write a journal entry. Today we rolled out the RSS and XSLT changes
that I talked about last week in my journal entry. I finally finished
up with all the blog changes and rolled them live as well. I also
modified our templates to use a PHP file that generates a CSS document
(changes the header data type so it is interpreted as one) for all the
blogs. This way if we change something we don’t have to change a bunch
of different themes, just one. It uses variables passed in the URL
(like type=single) to determine what stuff to output. I also started
to work on a authentication plugin that integrates with our current
SSO (single sign on) architecture and MediaWiki. One other thing I did
was introduce one of our workers to how CSS works. He is new and
doesn’t really know much about web programming but is definitely smart
enough to learn. He is doing pretty well with it and I barely had to
help him today after working with him for a week.

All my previous entries (newest on top):
This week I added a new feature to the photo services page to add for
checking out with waived charges. It requires you to login before you
can do it. It also record your information with the purchase. I also
added another option for the picture size on the same application.
After that I continued to work on the new wider 960px template for the
blogs. I finished most of this but I need to make sure everything
validates and then make a version for West Plains. I fixed a database
problem for the breathe easy mo site which was pretty fast. They’re
primary key was suppose to be auto incrementing but it wasn’t. I
started to work on a problem with RSS feeds going through an XSLT and
not working properly with the way our feeds interpret, but I didn’t
finish. The problem is relating to that fact that one of the XML tags
has an attribute on it and this isn’t accounted for in the XSLT.

This we I continued working on resizing the blog. I also started to
teach a fellow employee how to write CSS. Writing CSS is an intricate
part of web developing and understand how it meshes together with
other technologies and itself is critical. I also introduced him to
Firebug which will allow him to more easily test and develop the CSS
he writes. He is also a CSC major, but a freshman so he has very
little experience. It is an interesting experience and I kind of like
helping him with learn it.

Although I thought I was finished with the class tooltip popup last
week I wasn’t. I realized that it didn’t work properly in IE and also
that there were some errors with it that have to do with the
asynchronous nature of JavaScript. I had an issue where the function
called by my Ajax would run before the Tooltip returned the tooltip
contents so it would’nt properly fill the Tooltip in IE due to
caching. To fix this I modified the jQuery ToolTip plugin to call a
function after it put the content in the tooltip. This fixed
everything. I also started working on another WordPress project that
involves resizing the blog sizes to the upcoming 960px wide standard
that MSU is moving too. It has been uneventful so far.

This week I finished the magazine.missouristate.edu website and ti
should be viewable by the public now. I learned a lot about WordPress
like how to create custom widgets, plugins, and making custom pages
with custom templates. Every page on the site has been modified to use
custom fields and many other cool things. I also worked on a project
that allows you to view course information in the online course
catalog by hovering over a course in the major and minor description.
When you float over one of them a script uses an external page that
queries the database based on information passed in the URL then
returns a JSON object and function call. This causes a function i
wrote to replace the text in the popup with the information
transmitted by the ajax like call. This page isn’t live yet. I also
created a slideshow using the flickr API call to get a JSON object
with callback function and using it to create a slideshow with
easyslider. A callback function was added to easyslider to allow for
this integration. It also shows custom image information on the right
hand side of the slideshow. You can see it on the presidential search
website at http://www.missouristate.edu/presidentialsearch/missouristate.htm

I am still working on the magazine site. It is suppose to be released
on Monday for the public. Right now it is hidden from everyone except
a few people who log in to view it. I have to create a custom style
sheet to fix some compatibility issues with IE7. IE7 incorrectly uses
padding on elements and requires special styles because of it. I think
its pretty amazing that a product by such a large company could have
such a major flaw in it.

This week on continued working on the magazine.missouristate.edu
website. I finished the plugin I was writing for WordPress that allows
somone to easily embed content from various sources (youtube, .mp4
URLs, .mp3 URLs, and flickr slideshows). A lot of custom coding work
has gone into the homepage, table of contents, and archives. Even the
search and 404 pages have some custom code. Unfortunately I also spent
some of my time changing some of the design which is always annoying.
Hopefully by next week I will be done with this project and it will be
production ready.

This week I have been working on http://magazine.missouristate.edu.
This project is based uses WordPress which is based in PHP. I am
creating a custom template for the site. It will include a custom
archive, index, and table of contents pages. I am also making a plugin
for wordpress that allows easier insertion of media. I think I will be
working on this much of next week as well. I am using WordPress, PHP,
JavaScript, CSS, and HTML with Dreamweaver.