[Phplib-users] Is the php-lib in working conditions ..... ?

[Joerg B. <be...@ta...>]

Hi,

i would say no. In the cvs version thats is aviable at sourceforge the ar=
e
several  minor errors and some things that wont works as aspected.

1. In prepend.php3 there is an > missing at the end.
2. Per default there was a class created in local4.inc called
'example_CT_Cookie' but some one forget to load 'ct_cookie.inc' in
prepend.php3
3.  The registerform.ihtml canot be loaded in auth_registerform because t=
he
'$_PHPLIB["libdir"]' is missing in the include.
4.  Its possible to create accounts over the registerfrom without insert =
a
username and password. Sound not like a good idea?
5. Is the password encrytion working in the Auth_SQL class ? Using a clas=
s
that looks like
class MyAuth extends Auth_Sql {
  var $classname      =3D "MyAuth";
  var $lifetime       =3D 15;
  var $mode           =3D "log"; ## can do "log" as well.
  var $passenc        =3D "base64";
  var $database_class =3D "MyDb";
  var $database_table =3D "auth_user";
  var $nobody         =3D true;   ## true for default authentication
  var $cancel_login =3D "cancel_login";
}
wouldnt work as aspected. The password was always storing in plaintext mo=
de
into the database. I have test this with 'md5' too.

6. I cant get the $cancel_login to work  Have someone a small example for=
 me
how to works with this feature ?
7. The old 'html' documentations is outdated  or why is it removed ?
8. When using session4.inc with trans-sid there was 2 sids creating in a =
the
loginform: One with the $this->url() funktions and the other one as a hid=
den
field.
9. Using the default authentication ($nobody =3D true) and
$auth->login_if($again) in all the pages it is impossilbe to login becaus=
e
the loginform uses $this->url()  and create a url like this.
'http://foobar.com/index.php?again=3Dtrue&sid=3Dabcdef123 .' Now im going=
 into a
loop because $again is setting to 'true' and calls $auth->login_if($again=
)
again.

I'm using the phplib 7.2b/c for a long time ago and now im using the the =
cvs
version and i`m really afraid.

with best regards
Joerg Behrens

--
TakeNet GmbH                        Mobil: 0171/60 57 963
D-97080 Wuerzburg                 Tel: +49 931 903-2243
Alfred-Nobel-Stra=DFe 20            Fax: +49 931 903-3025