When a Facebook Connect user posts a comment the author field of the comment will link back to that user's public profile page at Facebook. For instance, my comments link back to http://www.facebook.com/people/Adam-Hupp/806285106.
To reduce spamming Wordpress automatically adds the nofollow attribute to all comment links, but this is undesirable when the links are generated by a trusted source (e.g the plugin). For this reason the plugin will remove the nofollow attribute from all Facebook user comments. This is configurable on the Settings page.
The first time a user selects the "Connect" button the plugin will create a new wordpress user named 'fbN', where N is a Facebook user id. The Facebook user id is also stored in the wp_usermeta table under the key 'fbuid'. The plugin can securely identify the Facebook user because it recieved signed session cookies along with the request.
Once the Wordpress and Facebook account are linked and the Facebook userid is verified the plugin sets a Wordpress login cookie. The page reloads and at this point the user will be logged into the blog.
Most login state handling occurs in fbcinitauth.




