Re: [phpesp-general] Removing password and sessions

[Franky V. L. <lie...@te...>]

On Fri, 1 Feb 2008 16:50:25 -0700
"Eric Olsen" <er...@ex...> wrote:

> Hello,
>  
> Is there a way to remove all password authentication and
> cookies/sessions? I have other security and we don't care how many
> times the people taking the surveys fill them out.  Its just
> complicating our installation. 
> Is there an easy way to do this?
>  
> Thanks,
>  
> Eric Olsen
> Denver, CO.

Hi Eric,

you can remove the cookies (it's an config option). The sessions are
needed for the moment though ...
But you can create your own authentication module, or use basic http
authentication as auth method, or disable auth and protect it in any
oter way you see fit. See admin/phpESP.ini.php :

// to limit double postings
// set this to the number of days people are restricted from
resubmitting // this is in fact the expire time for a cookie
// Set this to 0 to disable
$ESPCONFIG['limit_double_postings'] = 3;

...

// Use authentication for designer interface (BOOLEAN)
$ESPCONFIG['auth_design'] = true;

// Use authentication for survey responders (BOOLEAN)
$ESPCONFIG['auth_response'] = true;

....

$ESPCONFIG['auth_type'] = 'default';

// LDAP connection information
// (Set these values if you choose 'ldap' as the authentication type.)
// if a user is not found in ldap, the DB is still searched as well
// designer info is copied in the DB
$ESPCONFIG['ldap_server'] = 'ldap://ldap.example.com';
$ESPCONFIG['ldap_port']   = '389';
$ESPCONFIG['ldap_dn']     = 'dc=example, dc=com';
$ESPCONFIG['ldap_filter'] = 'uid=';

...

// Choose authentication mode: { 'basic', 'form' }
$ESPCONFIG['auth_mode'] = 'form';


This should give you all the freedom you want ...

Franky