Re: [Phplib-users] new.auth.inc

[Andrey L. <an...@nk...>]

On Mon, 2002-06-10 at 22:00, Giancarlo Pinerolo wrote:

> var $nobody has no more sense because
>=20
> any page that may go for both authd/not_authed needs auth class=20
> user & perm are optional, and depend on your needs
>=20
> I realized that after I published the patch.
>=20
> you can use your default_auth class, or your auth,
> without difference.
> auth->[uid]=3D=3D nobody is not checked anymore.
>=20

If so, why difference exists? If $nobody is false, all if's in your
new.auth.inc->start() fails and auth->start() returns false.
then new.page.inc do the folowing:
      if (!$auth->start())
         {
         page_showform();
         $sess->freeze();
         exit;
         }

We've got the same behaviour as in phplib's auth version: page_showform
is shown from that moment and forever until one reloads browser.

Actually if auth_preauth method is overrided as Matteo Sgallaverni
suggested On Mon, 2002-06-10 at 01:10. everething seems to work fine
with new.auth.inc, but IMHO its not a RIGHT way of using auth.=20

Well may be i'm wrong...:) Anyway i's seems that everyone here is
writing his own The Ultimate And The Best auth class and nobody using
that from library:) i really don't want to write another one:)

--=20
Andrey Lebedev
Naujoji Komunikacija