Hello, I am working for a company, and have developed a user based system. For authentication, I am storing username/pass in a mysql database. The main site is done, and now we are working on setting up our call center site. This is my general idea, and I would love any opinions/other ideas.
The Call Center will only be able to access a few select items.
The way I see it, I am going to have a usertype named call center, the rest of the system is divided up into 3 catagories already (Cities, Contractors, and Administrators). The Call Center Rep will log in to the website, and will get their menu of tasks. On this menu, they will have a link to "Log in as contractor".
When they click that link, it will take them to a login screen and ask for username and DL #. The DL# will act as the password for this part of the site, so the actual password will not be comprimsed.
Once the username and the DL are verified, they will be stored in session variables. (My Login script is at the top of every page) At this point the Call Center will get the Contractor Support menu.
This is kind of sketchy just came up with it while trying to go to sleep, but thanks for any input/ideas you might have.
JAKE
