Re: [Phplib-users] again auth.inc and forms phpnuke like

[Giancarlo P. <gia...@na...>]

Matteo Sgalaberni wrote:
> 
> I'm again about managing authentication like "phpnuke":
> 
> - a login form is displayed only when the user is not auth
> - the form is hidden if the user is authenticated
> 
> The Auth Class was originally designed mainly by Massimiliano
> Masserelli(aka negro) and it's problem to solve was:
> 
> - If a page require that a user is authenticated, phplib auth it. And
>   was implemented the automated states that changes in order to cover
>   all problems related.
> 

I remember when he did that. After a few weeks, when we found that one
could not hit the back button, someone added the cancel_login stuff...
Which anyway doesn't solve the fact that you cannot access a
defalult-auth page, not even with another browser window, when a login
form is out anywhere....

I tell you, it's all badly broken. 
The default_auth idea is broken too, because it's only use is to avoid
the show up of the login page. If the decision of showing a login form
is moved out of start, there's no need for default_auth too. 

Gian