Re: [Phplib-users] again auth.inc and forms phpnuke like
Brought to you by:
nhruby,
richardarcher
|
From: Giancarlo P. <gia...@na...> - 2002-06-10 00:53:04
|
Matteo Sgalaberni wrote: > > I'm again about managing authentication like "phpnuke": > > - a login form is displayed only when the user is not auth > - the form is hidden if the user is authenticated > > The Auth Class was originally designed mainly by Massimiliano > Masserelli(aka negro) and it's problem to solve was: > > - If a page require that a user is authenticated, phplib auth it. And > was implemented the automated states that changes in order to cover > all problems related. > I remember when he did that. After a few weeks, when we found that one could not hit the back button, someone added the cancel_login stuff... Which anyway doesn't solve the fact that you cannot access a defalult-auth page, not even with another browser window, when a login form is out anywhere.... I tell you, it's all badly broken. The default_auth idea is broken too, because it's only use is to avoid the show up of the login page. If the decision of showing a login form is moved out of start, there's no need for default_auth too. Gian |