Is it possible to ride off the back of the myDBR authentication?
I may be using AJAX/iframes to add overlay functionality. Is it possible to plug into your authentication so I can ensure that requests are from an authorised source (ie - the user is logged into myDBR)?
I can see that mydbr has set cookies. But I'm not sure about sessions... Do you use those?
If not, I am guessing there is a relationship between mydbr-id and the mydbr_username cookie. If this is the case, can you let me know what it is... I can just check for this.
Many thanks
Rick