BookReaderAuth.php, which sets loan related cookies from values passed from OL, so...

diff --git a/BookReaderIA/www/BookReaderAuth.php b/BookReaderIA/www/BookReaderAuth.php
new file mode 100644 (file)
index 0000000..79e0ffb
--- /dev/null
+++ b/BookReaderIA/www/BookReaderAuth.php
@@ -0,0 +1,32 @@
+<?
+/*
+Copyright(c)2011 Internet Archive. Software license AGPL version 3.
+
+This file is part of BookReader.
+
+    BookReader is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    BookReader is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with BookReader.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+$id = $_POST['id'];
+$uuid = $_POST['uuid'];
+$token = $_POST['token'];
+$bookPath = $_POST['bookPath'];
+
+// XXX sanitize incoming params!
+setcookie('br-loan-' . $id, $uuid, 0, '/', '.archive.org');
+setcookie('loan-' . $id, $token, 0, '/', '.archive.org');
+
+header('Location: ' . $bookPath);
+
+?>
\ No newline at end of file