The authentification process in V0.9.1b has a backdoor allowing users to access data they are not allowed to see.
DO NOT USE PHPALUMNI IN A PRODUCTION ENVIRONMENT YET!!!
I already sketched a solution which I will implement in the following days.
Ralf