Re: [Phplib-users] Giancarlo Pinerolo (pingus) auth patch

[Giancarlo P. <gia...@na...>]

Admin wrote:
> 
> Just for saying that functions like $perm->check() and
> $perm->have_perm() work fine with your patch.
> Good job.
> 
> |If you already are logged with 'user' permissions, and submit a login
> |for an 'admin', will it work?
> 
> Yes I try but it doesn't work, but it isn't a problem for me, infact if
> someone logged in, the login form is substituted by a logout link.
> 

You need a session->delete or what the heck session->destroy, before. 
Apart from that, did you check it with the various register_globals off,
php 4.2.1, etc?

Really I have no time for this, at the moment. 
I am in the uneasy position of having to shout around to 'advertise'
that big hole.. which is something I hate to do. 
That patch is for solely test purposes, don't use it for anything else.

Giancarlo



> Have fun
> 
> Michele Marcucci
> 
> Giancarlo Pinerolo wrote:
> 
> >Michele Marcucci wrote:
> >
> >
> >>With this patch all works fine, i finally reach my scope, i can include
> >>now a loginform anywhere i want in my index page and it doesn't seem a
> >>stand-alone page, like it was before.
> >>I'm not sure if this patch is foundamental for the scope but now works,
> >>so many thanks Giancarlo and a question:
> >>Can i have problem now with the rest of "standard" phplib function and
> >>features?
> >>
> >>
> >>
> >
> >The perm->check feature I have to fix, to return true/false instead of
> >showing perminvalid (which was absurd anyway, you'd want a
> >login/register form instead)
> >
> >In the end you will not do
> >$perm->check()
> >
> >but, same as for auth,
> >
> >if(!$perm->check())
> >   {
> >   $auth->auth_loginform();  # or $perm->perminvalid, if you prefer
> >   }
> >
> >But I'ven't tried that yet.
> >If you already are logged with 'user' permissions, and submit a login
> >for an 'admin', will it work?
> >I've to try.
> >
> >The rest should work, but I exhort you to try it very very well before.
> >
> >Also I haven't tried it with the latest phplib-stable from cvs, which I
> >myself recently commited.
> >The two shouldn't interfere, 'cause the patch I applied to cvs is
> >related to session.
> >But better try it. And thanks for the feedback
> >
> >
> >Giancarlo
> >
> >_______________________________________________________________
> >
> >Don't miss the 2002 Sprint PCS Application Developer's Conference
> >August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
> >
> >_______________________________________________
> >Phplib-users mailing list
> >Php...@li...
> >https://lists.sourceforge.net/lists/listinfo/phplib-users
> >
> >