Re: [Phplib-users] again auth.inc and perm.inc !

[Michael C. <mdc...@mi...>]

On Mon, Jun 10, 2002 at 12:27:52PM +0200, Guillaume Desclaux wrote:
> I've not really follow this discussion closely but i cannot disagree that the
> code of auth.inc is pretty much hard to maintain... and that it is very hard
> to code a phpnuke login style with it... and the default_auth is not very
> helping... so the code of the auth.class is probably not exactly what we need
> now...
> 
> So, the suggestion of Giancarlo make sens for me, but it is an evidence that
> we need to examine closely the "secondary effect" of these kind of
> modification in the structure of the auth class ...
> 
> Using session to store the pre_login_state of auth class seems to be a good
> idea to avoid the "vicious circle" of an auth class not ready
> authenticated... and avoid to use auth[uid] as a flag seems to be a really
> good idea too...

I hate to beat a dead horse, but I have fixed all of this in my phpauth
code:
 
http://www.phpauth.com/
  
I've been using phplib for a number of years, and finally decided to
rewrite the parts that needed to be fixed.  All the problems that you
and Giancarlo bring up are problems that I recognized over a year ago,
and I've spent that year fixing them.  Please don't duplicate effort.

> Moreover... the perm.inc should be probably redesigned... the use of a
> bitmask is a great idea in a vision of phplib used to build a simple
> application... but phplib is now involved in "large" project : a web site
> with many "little" application... each application needed is own perm
> sheme... so we need to have a real user/group/perm sheme.

Also fixed in phpauth.

Michael
-- 
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/