phplib-trackers Mailing List for PHPLIB (Page 6)
Brought to you by:
nhruby,
richardarcher
Menu
▾
▴
phplib-trackers — List for monitoring the phplib SourceForge trackers.
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(91) |
Sep
(12) |
Oct
(26) |
Nov
(16) |
Dec
(14) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(37) |
Feb
(22) |
Mar
(39) |
Apr
(74) |
May
(14) |
Jun
(17) |
Jul
(81) |
Aug
(32) |
Sep
(28) |
Oct
(18) |
Nov
(8) |
Dec
(6) |
| 2003 |
Jan
(6) |
Feb
(11) |
Mar
(5) |
Apr
(4) |
May
(6) |
Jun
(6) |
Jul
(5) |
Aug
(3) |
Sep
(8) |
Oct
(4) |
Nov
(2) |
Dec
(2) |
| 2004 |
Jan
(1) |
Feb
|
Mar
(3) |
Apr
(8) |
May
(1) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(3) |
Nov
|
Dec
(2) |
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(1) |
| 2006 |
Jan
|
Feb
(2) |
Mar
(6) |
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(2) |
Oct
(2) |
Nov
|
Dec
|
| 2007 |
Jan
|
Feb
(2) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
(1) |
Nov
|
Dec
|
| 2008 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
| 2009 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2010 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(41) |
Nov
|
Dec
(78) |
|
From: <no...@so...> - 2002-10-05 08:23:18
|
Patches item #618873, was opened at 2002-10-05 07:39 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=618873&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: prevent resubmit already posted loginfor Initial Comment: This patches to loginform.ihtml and the validatelogin in locval.inc prevent tte resubmission of a form already submitted, thus prevents going back with the browser back button and repost auth credentials when authentication is expired ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-05 08:23 Message: Logged In: YES user_id=163488 my previous version of local.inc stored the used_formidsa in tha auth->auth persistent array. But once someone logged off, that would be cleared, thus again allowing going 'back' to the posted loginform This version stores the used_formids as a persistent session variable ($sess-Zregister("used_formids"), so oit should be there as long the sessions is tha same. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=618873&group_id=31885 |
|
From: <no...@so...> - 2002-10-05 07:39:03
|
Patches item #618873, was opened at 2002-10-05 07:39 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=618873&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: prevent resubmit already posted loginfor Initial Comment: This patches to loginform.ihtml and the validatelogin in locval.inc prevent tte resubmission of a form already submitted, thus prevents going back with the browser back button and repost auth credentials when authentication is expired ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=618873&group_id=31885 |
|
From: <no...@so...> - 2002-10-02 14:43:51
|
Patches item #561500, was opened at 2002-05-28 12:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: simplified auth->start, no uid=form stat Initial Comment: This is the new auth.inc. You need to substitute this and the following page.inc. Changes in the API are being reduced at minimum. The explanation follows ...... I was reflecting on the rationale behind this intermediate state, whenever a login or register form is showed out, The auth object is initialized with the $auth->auth[uid]='form' This is done in method start of auth class. Then, only if this value is set to 'form', the $auth->mode value (reg/log) is tested, and a registration or a login is attempted with the data supplied. This too is done within the start method of class auth. All this is not taken into account if you provide your own auth_preauth function. I don't know why this intermediate state has been coded, I suppose there can be some safety gains, and maybe you can point me to some. One I can think of is that you block 'post-and-register' submissions (in fact is getsession-post-and-register), because that value has to be set to form. What other can be the end of having that intermediate state? Is the end to forces you to have obtained already a session before sobmitting a login o register form. As an aklternativa, to get the same, I think that you could pass a 'session' input field, and the that has to contain a valid session value But this causes a whole lot of problems, among which: -you cannot simply show a login or register form anywhere, 'cause it's input won't be taken in consideration, not being auth[uid]=='form' -once a for is showed yu are stuck and need the cancel_login button to get clean The auth->mode log/reg issue is very incumbrent too, at least being it handled from inside auth. You are stuck with the same policy all over. I'd prefer it to be decided by me, when I need to put out a form. The form should contain an input field, that can be named 'request', anv value 'register' or 'authenticate' (the default). Because otherwise, when the behavior is not the intended, we have to dig into method $auth->start, see what 'mode' value has arrived down to there (and hey, there are two $mode: one is auth->mode the other is the get param in the url ?mode=log that should serve to force the show of a form different from the one stated in $auth->mode... quite complicated at the moment). ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 14:43 Message: Logged In: YES user_id=163488 ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:37 Message: Logged In: YES user_id=163488 auth inc with __sleep function (necessary for all session4+auth users) retionalized start method check_feature method, checks same feature as persisted auth. Fixed switch state from auth/default_auth fixed 'nobody' loginc eliminated session_blocking login_in_progress state (uid=form), can be enforced in page.inc reviewed log/reg form request logic and more ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:31 Message: Logged In: YES user_id=163488 page inc with the resumption bug fixed, behaves as usual (splashform). For back compat cancel_login can be fixed here. ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:28 Message: Logged In: YES user_id=163488 This is the latest rationalized auth with the auth resumption bug fixed in page.inc, and the _sleep function to allow max compat with session4. It is based on latest cvs, as of 10 Oct 2002, with the patest patches applied to php-lib-stable, included support for session4 and session4_custom The new files with respect to the php-lib-stable are: auth.inc page.inc and are provided also as separate text files To try it, unpack under docroot, modify path in pages/prepend.php3, dbuser and passwd in php/local.inc ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-27 00:39 Message: Logged In: YES user_id=163488 This works with php 4 and register globals off. Both blocking behaviour, SPLASH or deferred/conditional, work. One single page inc for all cases, honours existing usage of auth or default_auth classes There exist a bug in actual auth resumption that prevents phplib3 passing correctli among pages of the two types. This should also fix that ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 20:31 Message: Logged In: YES user_id=163488 the SPLASHFORM behavior works with the unchanged showoff.php3 example from the distribution ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 19:49 Message: Logged In: YES user_id=163488 This is the latest version. default_auth is now a noop. Auth already does that ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 |
|
From: <no...@so...> - 2002-10-02 10:37:39
|
Patches item #561500, was opened at 2002-05-28 12:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: simplified auth->start, no uid=form stat Initial Comment: This is the new auth.inc. You need to substitute this and the following page.inc. Changes in the API are being reduced at minimum. The explanation follows ...... I was reflecting on the rationale behind this intermediate state, whenever a login or register form is showed out, The auth object is initialized with the $auth->auth[uid]='form' This is done in method start of auth class. Then, only if this value is set to 'form', the $auth->mode value (reg/log) is tested, and a registration or a login is attempted with the data supplied. This too is done within the start method of class auth. All this is not taken into account if you provide your own auth_preauth function. I don't know why this intermediate state has been coded, I suppose there can be some safety gains, and maybe you can point me to some. One I can think of is that you block 'post-and-register' submissions (in fact is getsession-post-and-register), because that value has to be set to form. What other can be the end of having that intermediate state? Is the end to forces you to have obtained already a session before sobmitting a login o register form. As an aklternativa, to get the same, I think that you could pass a 'session' input field, and the that has to contain a valid session value But this causes a whole lot of problems, among which: -you cannot simply show a login or register form anywhere, 'cause it's input won't be taken in consideration, not being auth[uid]=='form' -once a for is showed yu are stuck and need the cancel_login button to get clean The auth->mode log/reg issue is very incumbrent too, at least being it handled from inside auth. You are stuck with the same policy all over. I'd prefer it to be decided by me, when I need to put out a form. The form should contain an input field, that can be named 'request', anv value 'register' or 'authenticate' (the default). Because otherwise, when the behavior is not the intended, we have to dig into method $auth->start, see what 'mode' value has arrived down to there (and hey, there are two $mode: one is auth->mode the other is the get param in the url ?mode=log that should serve to force the show of a form different from the one stated in $auth->mode... quite complicated at the moment). ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:37 Message: Logged In: YES user_id=163488 auth inc with __sleep function (necessary for all session4+auth users) retionalized start method check_feature method, checks same feature as persisted auth. Fixed switch state from auth/default_auth fixed 'nobody' loginc eliminated session_blocking login_in_progress state (uid=form), can be enforced in page.inc reviewed log/reg form request logic and more ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:31 Message: Logged In: YES user_id=163488 page inc with the resumption bug fixed, behaves as usual (splashform). For back compat cancel_login can be fixed here. ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:28 Message: Logged In: YES user_id=163488 This is the latest rationalized auth with the auth resumption bug fixed in page.inc, and the _sleep function to allow max compat with session4. It is based on latest cvs, as of 10 Oct 2002, with the patest patches applied to php-lib-stable, included support for session4 and session4_custom The new files with respect to the php-lib-stable are: auth.inc page.inc and are provided also as separate text files To try it, unpack under docroot, modify path in pages/prepend.php3, dbuser and passwd in php/local.inc ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-27 00:39 Message: Logged In: YES user_id=163488 This works with php 4 and register globals off. Both blocking behaviour, SPLASH or deferred/conditional, work. One single page inc for all cases, honours existing usage of auth or default_auth classes There exist a bug in actual auth resumption that prevents phplib3 passing correctli among pages of the two types. This should also fix that ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 20:31 Message: Logged In: YES user_id=163488 the SPLASHFORM behavior works with the unchanged showoff.php3 example from the distribution ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 19:49 Message: Logged In: YES user_id=163488 This is the latest version. default_auth is now a noop. Auth already does that ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 |
|
From: <no...@so...> - 2002-10-02 10:31:44
|
Patches item #561500, was opened at 2002-05-28 12:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: simplified auth->start, no uid=form stat Initial Comment: This is the new auth.inc. You need to substitute this and the following page.inc. Changes in the API are being reduced at minimum. The explanation follows ...... I was reflecting on the rationale behind this intermediate state, whenever a login or register form is showed out, The auth object is initialized with the $auth->auth[uid]='form' This is done in method start of auth class. Then, only if this value is set to 'form', the $auth->mode value (reg/log) is tested, and a registration or a login is attempted with the data supplied. This too is done within the start method of class auth. All this is not taken into account if you provide your own auth_preauth function. I don't know why this intermediate state has been coded, I suppose there can be some safety gains, and maybe you can point me to some. One I can think of is that you block 'post-and-register' submissions (in fact is getsession-post-and-register), because that value has to be set to form. What other can be the end of having that intermediate state? Is the end to forces you to have obtained already a session before sobmitting a login o register form. As an aklternativa, to get the same, I think that you could pass a 'session' input field, and the that has to contain a valid session value But this causes a whole lot of problems, among which: -you cannot simply show a login or register form anywhere, 'cause it's input won't be taken in consideration, not being auth[uid]=='form' -once a for is showed yu are stuck and need the cancel_login button to get clean The auth->mode log/reg issue is very incumbrent too, at least being it handled from inside auth. You are stuck with the same policy all over. I'd prefer it to be decided by me, when I need to put out a form. The form should contain an input field, that can be named 'request', anv value 'register' or 'authenticate' (the default). Because otherwise, when the behavior is not the intended, we have to dig into method $auth->start, see what 'mode' value has arrived down to there (and hey, there are two $mode: one is auth->mode the other is the get param in the url ?mode=log that should serve to force the show of a form different from the one stated in $auth->mode... quite complicated at the moment). ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:31 Message: Logged In: YES user_id=163488 page inc with the resumption bug fixed, behaves as usual (splashform). For back compat cancel_login can be fixed here. ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:28 Message: Logged In: YES user_id=163488 This is the latest rationalized auth with the auth resumption bug fixed in page.inc, and the _sleep function to allow max compat with session4. It is based on latest cvs, as of 10 Oct 2002, with the patest patches applied to php-lib-stable, included support for session4 and session4_custom The new files with respect to the php-lib-stable are: auth.inc page.inc and are provided also as separate text files To try it, unpack under docroot, modify path in pages/prepend.php3, dbuser and passwd in php/local.inc ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-27 00:39 Message: Logged In: YES user_id=163488 This works with php 4 and register globals off. Both blocking behaviour, SPLASH or deferred/conditional, work. One single page inc for all cases, honours existing usage of auth or default_auth classes There exist a bug in actual auth resumption that prevents phplib3 passing correctli among pages of the two types. This should also fix that ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 20:31 Message: Logged In: YES user_id=163488 the SPLASHFORM behavior works with the unchanged showoff.php3 example from the distribution ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 19:49 Message: Logged In: YES user_id=163488 This is the latest version. default_auth is now a noop. Auth already does that ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 |
|
From: <no...@so...> - 2002-10-02 10:28:43
|
Patches item #561500, was opened at 2002-05-28 12:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: simplified auth->start, no uid=form stat Initial Comment: This is the new auth.inc. You need to substitute this and the following page.inc. Changes in the API are being reduced at minimum. The explanation follows ...... I was reflecting on the rationale behind this intermediate state, whenever a login or register form is showed out, The auth object is initialized with the $auth->auth[uid]='form' This is done in method start of auth class. Then, only if this value is set to 'form', the $auth->mode value (reg/log) is tested, and a registration or a login is attempted with the data supplied. This too is done within the start method of class auth. All this is not taken into account if you provide your own auth_preauth function. I don't know why this intermediate state has been coded, I suppose there can be some safety gains, and maybe you can point me to some. One I can think of is that you block 'post-and-register' submissions (in fact is getsession-post-and-register), because that value has to be set to form. What other can be the end of having that intermediate state? Is the end to forces you to have obtained already a session before sobmitting a login o register form. As an aklternativa, to get the same, I think that you could pass a 'session' input field, and the that has to contain a valid session value But this causes a whole lot of problems, among which: -you cannot simply show a login or register form anywhere, 'cause it's input won't be taken in consideration, not being auth[uid]=='form' -once a for is showed yu are stuck and need the cancel_login button to get clean The auth->mode log/reg issue is very incumbrent too, at least being it handled from inside auth. You are stuck with the same policy all over. I'd prefer it to be decided by me, when I need to put out a form. The form should contain an input field, that can be named 'request', anv value 'register' or 'authenticate' (the default). Because otherwise, when the behavior is not the intended, we have to dig into method $auth->start, see what 'mode' value has arrived down to there (and hey, there are two $mode: one is auth->mode the other is the get param in the url ?mode=log that should serve to force the show of a form different from the one stated in $auth->mode... quite complicated at the moment). ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-10-02 10:28 Message: Logged In: YES user_id=163488 This is the latest rationalized auth with the auth resumption bug fixed in page.inc, and the _sleep function to allow max compat with session4. It is based on latest cvs, as of 10 Oct 2002, with the patest patches applied to php-lib-stable, included support for session4 and session4_custom The new files with respect to the php-lib-stable are: auth.inc page.inc and are provided also as separate text files To try it, unpack under docroot, modify path in pages/prepend.php3, dbuser and passwd in php/local.inc ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-27 00:39 Message: Logged In: YES user_id=163488 This works with php 4 and register globals off. Both blocking behaviour, SPLASH or deferred/conditional, work. One single page inc for all cases, honours existing usage of auth or default_auth classes There exist a bug in actual auth resumption that prevents phplib3 passing correctli among pages of the two types. This should also fix that ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 20:31 Message: Logged In: YES user_id=163488 the SPLASHFORM behavior works with the unchanged showoff.php3 example from the distribution ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 19:49 Message: Logged In: YES user_id=163488 This is the latest version. default_auth is now a noop. Auth already does that ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 |
|
From: <no...@so...> - 2002-10-01 16:43:24
|
Patches item #613295, was opened at 2002-09-23 12:00 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 Category: None Group: None >Status: Deleted >Resolution: Accepted Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: same as [ 612139 ], + phplib API compat Initial Comment: This is the same as patch [ 612139 ] by Joe Stewart. To it, are added the register(), is_registered() unregister() functions. Also is implemented the new (php 4.2.2) session.use_only_cookie, equivalent to phplib mode=cookie, fallback_mode=cookie. So by setting these two, thisi nterface to php4 session will behave as expected, that is use ONLY cookies for propagation. Notes: the phplib API for register() and unregister(), didn't return any value. Only is_registered() returns true/false. And so I put the session4 back in line with phplib, as 'unset' and $_SSESSION[var]=xxx do not return anything anyway in php language. These wrapper functions should permit to upgrade a phplib based application to use PHP4 native sessions instead (session4), and work unchanged on a setup either with register_globals On or Off. When this get enough tested, session4_custom.inc can be updated too. Gian ---------------------------------------------------------------------- Comment By: Joe Stewart (joestewart) Date: 2002-10-01 11:43 Message: Logged In: YES user_id=77269 This patch has been applied to the CVS. Please update your copy of PHPLIB CVS, or wait for the next release. ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-23 14:05 Message: Logged In: YES user_id=163488 But now I found that these functions, even though the manual says they shouldn't be used with register_:globals=Off, do work with them Off. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 |
|
From: <no...@so...> - 2002-10-01 16:42:50
|
Patches item #612139, was opened at 2002-09-20 09:46 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=612139&group_id=31885 Category: None Group: None >Status: Pending Resolution: None Priority: 5 Submitted By: Joe Stewart (joestewart) Assigned to: Nobody/Anonymous (nobody) Summary: Session4_Custom w/reg. globals off Initial Comment: A patch to provide use of phplib Session4_Custom with register_globals off. NOTE: When using this patch all session variables are global. Patch performed on: session4_custom.inc,v 1.1 2002/01/05 15:47:37 ---------------------------------------------------------------------- Comment By: Joe Stewart (joestewart) Date: 2002-10-01 11:42 Message: Logged In: YES user_id=77269 This patch has been applied to the CVS. Please update your copy of PHPLIB CVS, or wait for the next release. ---------------------------------------------------------------------- Comment By: Joe Stewart (joestewart) Date: 2002-09-20 13:08 Message: Logged In: YES user_id=77269 Amended files. Changes in Session4.inc as needed as per Maxim Derkachev explanation. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=612139&group_id=31885 |
|
From: <no...@so...> - 2002-10-01 16:39:03
|
Bugs item #549660, was opened at 2002-04-27 20:20 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=549660&group_id=31885 Category: Session >Group: current CVS >Status: Pending >Resolution: Fixed Priority: 5 Submitted By: Richard Archer (richardarcher) Assigned to: Nobody/Anonymous (nobody) Summary: php4 session support Initial Comment: Max's php4 support does not appear to be complete in the -stable tree: session4.inc is missing local4.inc is missing integration into prepend.php3 is not done. And of course adding the readme into the docs. ---------------------------------------------------------------------- Comment By: Joe Stewart (joestewart) Date: 2002-10-01 11:39 Message: Logged In: YES user_id=77269 This problem has been corrected in the CVS. Please update your copy of PHPLIB CVS, or wait for the next release. ---------------------------------------------------------------------- Comment By: Joe Stewart (joestewart) Date: 2002-09-20 09:54 Message: Logged In: YES user_id=77269 As Richard noted. session4.inc is missing as well as a prepend.php3 modified for using Session4_Custom. Session4_Custom.inc and session/Session4.inc need to be moved to the correct directories. Documentation for installation will be simple after this is completed ---------------------------------------------------------------------- Comment By: nathan hruby (nhruby) Date: 2002-07-01 17:01 Message: Logged In: YES user_id=19736 <sheepish> Please remind me which if the multiple seesion4.inc's and local4.inc's are Max's? </sheepish> they aren't integreated into local.inc because they are there for testing by people who would liek to pund on them, they are not a full blown feature yet . ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=549660&group_id=31885 |
|
From: <no...@so...> - 2002-10-01 15:44:16
|
Patches item #617072, was opened at 2002-10-01 10:26 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=617072&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Joe Stewart (joestewart) Assigned to: Nobody/Anonymous (nobody) Summary: Perm Extensions Initial Comment: This patch contains extensions to the Perm class. One only contains Ajay Sharma's change to add a "size" parameter to perm_sel. The second and third files change the permissions system greatly. Atomic permissions work basically as before. Inclusive permissions are simply an array of permissions. Instead of integer values, the permission check only looks to see if the permission exists for the authenticated user. This removes the 32 level limit of the previous permission class. Groups of permissions ( arrays of permissions ) can function as User Groups/Roles. Both files are functionally equivalent. permxtnd.inc - Extends perm class permx.inc - Replaces Perm instead. ---------------------------------------------------------------------- >Comment By: Joe Stewart (joestewart) Date: 2002-10-01 10:44 Message: Logged In: YES user_id=77269 An example permissions array: var $permissions = array( "user" => true, "author" => true, "editor" => true, "supervisor" => true, "admin" => true ); ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=617072&group_id=31885 |
|
From: <no...@so...> - 2002-10-01 15:26:45
|
Patches item #617072, was opened at 2002-10-01 10:26 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=617072&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Joe Stewart (joestewart) Assigned to: Nobody/Anonymous (nobody) Summary: Perm Extensions Initial Comment: This patch contains extensions to the Perm class. One only contains Ajay Sharma's change to add a "size" parameter to perm_sel. The second and third files change the permissions system greatly. Atomic permissions work basically as before. Inclusive permissions are simply an array of permissions. Instead of integer values, the permission check only looks to see if the permission exists for the authenticated user. This removes the 32 level limit of the previous permission class. Groups of permissions ( arrays of permissions ) can function as User Groups/Roles. Both files are functionally equivalent. permxtnd.inc - Extends perm class permx.inc - Replaces Perm instead. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=617072&group_id=31885 |
|
From: <no...@so...> - 2002-09-27 00:39:16
|
Patches item #561500, was opened at 2002-05-28 12:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: simplified auth->start, no uid=form stat Initial Comment: This is the new auth.inc. You need to substitute this and the following page.inc. Changes in the API are being reduced at minimum. The explanation follows ...... I was reflecting on the rationale behind this intermediate state, whenever a login or register form is showed out, The auth object is initialized with the $auth->auth[uid]='form' This is done in method start of auth class. Then, only if this value is set to 'form', the $auth->mode value (reg/log) is tested, and a registration or a login is attempted with the data supplied. This too is done within the start method of class auth. All this is not taken into account if you provide your own auth_preauth function. I don't know why this intermediate state has been coded, I suppose there can be some safety gains, and maybe you can point me to some. One I can think of is that you block 'post-and-register' submissions (in fact is getsession-post-and-register), because that value has to be set to form. What other can be the end of having that intermediate state? Is the end to forces you to have obtained already a session before sobmitting a login o register form. As an aklternativa, to get the same, I think that you could pass a 'session' input field, and the that has to contain a valid session value But this causes a whole lot of problems, among which: -you cannot simply show a login or register form anywhere, 'cause it's input won't be taken in consideration, not being auth[uid]=='form' -once a for is showed yu are stuck and need the cancel_login button to get clean The auth->mode log/reg issue is very incumbrent too, at least being it handled from inside auth. You are stuck with the same policy all over. I'd prefer it to be decided by me, when I need to put out a form. The form should contain an input field, that can be named 'request', anv value 'register' or 'authenticate' (the default). Because otherwise, when the behavior is not the intended, we have to dig into method $auth->start, see what 'mode' value has arrived down to there (and hey, there are two $mode: one is auth->mode the other is the get param in the url ?mode=log that should serve to force the show of a form different from the one stated in $auth->mode... quite complicated at the moment). ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-27 00:39 Message: Logged In: YES user_id=163488 This works with php 4 and register globals off. Both blocking behaviour, SPLASH or deferred/conditional, work. One single page inc for all cases, honours existing usage of auth or default_auth classes There exist a bug in actual auth resumption that prevents phplib3 passing correctli among pages of the two types. This should also fix that ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 20:31 Message: Logged In: YES user_id=163488 the SPLASHFORM behavior works with the unchanged showoff.php3 example from the distribution ---------------------------------------------------------------------- Comment By: Giancarlo Pinerolo (pingus) Date: 2002-06-10 19:49 Message: Logged In: YES user_id=163488 This is the latest version. default_auth is now a noop. Auth already does that ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=561500&group_id=31885 |
|
From: <no...@so...> - 2002-09-26 21:06:51
|
Bugs item #615223, was opened at 2002-09-27 07:06 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=615223&group_id=31885 Category: Authentication Group: None Status: Open Resolution: None Priority: 5 Submitted By: Richard Archer (richardarcher) Assigned to: Nobody/Anonymous (nobody) Summary: new_user_md5.php reset array Initial Comment: Reposted from Marko Kaening via mailing list: I noticed that in new_user_md5.php one should probably insert a reset($HTTP_POST_VARS); otherwise the walk through the args doesn't work if the user already did something with with that array! ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=615223&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 18:42:58
|
Bugs item #478215, was opened at 2001-11-04 22:03 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=478215&group_id=31885 >Category: Session >Group: 7.2.x Status: Open >Resolution: Out of Date Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Nobody/Anonymous (nobody) Summary: cache-headers bug Initial Comment: Pages are cached using Konqueror or Opera(linux). I use this headers to resolve it: header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); header("Last-modified: ".gmdate("D, d M Y H:i:s")." GMT"); header("Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, post-check=0, pre-check=0, max-age=0, s-maxage=0"); header("Pragma: no-cache"); max-age=0 and s-maxage=0 resolve the problem. Others can be usefull in other cases. ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 13:42 Message: Logged In: YES user_id=279065 I suspect this bug report is out of date. The cache header handling was grealty changed, but the CVS log doesn't indicate exactly when so am not sure what version this person might have been using. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=478215&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 18:34:32
|
Bugs item #473196, was opened at 2001-10-20 12:25 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=473196&group_id=31885 Category: Data storage container Group: current CVS Status: Closed Resolution: Duplicate Priority: 5 Submitted By: Andreas Stein (steinas) Assigned to: Chris Johnson (chaska) Summary: ac_get_lock() and MySQL Initial Comment: file: ct_sql.inc object: ct_sql method: ac_get_lock() function ac_get_lock() { if ( "" != $this->database_lock_semaphore ) { $query = sprintf("SELECT get_lock('%s')", $this- >database_lock_semaphore); while ( ! $this->db->query($query)) { $t = 1 + time(); while ( $t > time() ) { ; } } } } for MySQL the SQL statement should be: "SELECT GET_LOCK(str, time_out)" or "SELECT GET_LOCK(str, 0)" $db->query($query) is always true even if lock state is false ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 13:34 Message: Logged In: YES user_id=279065 I've closed this report because report #550100 completely covers the situation. ct_sql.inc as written depends on the database being MySQL, and worse, does not even use currently correctly get_lock(name, timeout) syntax. Other databases may not even support this locking idea (Postgres does not, Oracle seems to). ---------------------------------------------------------------------- Comment By: Chris Johnson (chaska) Date: 2002-09-25 13:31 Message: Logged In: YES user_id=279065 I've closed this report because report #550100 completely covers the situation. ct_sql.inc as written depends on the database being MySQL, and worse, does not even use currently correctly get_lock(name, timeout) syntax. Other databases may not even support this locking idea (Postgres does not, Oracle seems to). ---------------------------------------------------------------------- Comment By: nathan hruby (nhruby) Date: 2002-07-02 14:02 Message: Logged In: YES user_id=19736 Please see Bug #550100 for further discussion of ac_get_lock. This is still a valid bug and shoudl be fixed for 7.4-final; however please know that it will most likely be scrapped and/or changed a good bit in the next major release. ---------------------------------------------------------------------- Comment By: Richard Archer (richardarcher) Date: 2002-04-29 05:35 Message: Logged In: YES user_id=279311 What happens if MySQL isn't the underlying database? This is so broken that the only way I can see to fix it is to delete all the code from this function and abolish session/application locks! I've posted another bug outlining a possible long-term fix. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=473196&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 18:31:58
|
Bugs item #473196, was opened at 2001-10-20 12:25 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=473196&group_id=31885 >Category: Data storage container Group: current CVS >Status: Closed >Resolution: Duplicate Priority: 5 Submitted By: Andreas Stein (steinas) >Assigned to: Chris Johnson (chaska) Summary: ac_get_lock() and MySQL Initial Comment: file: ct_sql.inc object: ct_sql method: ac_get_lock() function ac_get_lock() { if ( "" != $this->database_lock_semaphore ) { $query = sprintf("SELECT get_lock('%s')", $this- >database_lock_semaphore); while ( ! $this->db->query($query)) { $t = 1 + time(); while ( $t > time() ) { ; } } } } for MySQL the SQL statement should be: "SELECT GET_LOCK(str, time_out)" or "SELECT GET_LOCK(str, 0)" $db->query($query) is always true even if lock state is false ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 13:31 Message: Logged In: YES user_id=279065 I've closed this report because report #550100 completely covers the situation. ct_sql.inc as written depends on the database being MySQL, and worse, does not even use currently correctly get_lock(name, timeout) syntax. Other databases may not even support this locking idea (Postgres does not, Oracle seems to). ---------------------------------------------------------------------- Comment By: nathan hruby (nhruby) Date: 2002-07-02 14:02 Message: Logged In: YES user_id=19736 Please see Bug #550100 for further discussion of ac_get_lock. This is still a valid bug and shoudl be fixed for 7.4-final; however please know that it will most likely be scrapped and/or changed a good bit in the next major release. ---------------------------------------------------------------------- Comment By: Richard Archer (richardarcher) Date: 2002-04-29 05:35 Message: Logged In: YES user_id=279311 What happens if MySQL isn't the underlying database? This is so broken that the only way I can see to fix it is to delete all the code from this function and abolish session/application locks! I've posted another bug outlining a possible long-term fix. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=473196&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 18:06:42
|
Bugs item #571314, was opened at 2002-06-19 15:46 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=571314&group_id=31885 >Category: Session Group: None Status: Open >Resolution: Postponed Priority: 5 Submitted By: Daniel Bondurant (bondu) Assigned to: Nobody/Anonymous (nobody) Summary: zend 2.0/PHP 4.3 breaks functions Initial Comment: Zend 2.0 changes the way classes are handled. http://www.php.net/ZEND_CHANGES.txt first problem that sticks out it delele() can no longer be a function name. delete() is a functions in session.inc and sessions4.inc from the change long * Forced deletion of objects. The Zend Engine 1.0 had no means to force deletion of an object if there are still references to it. The newly introduced delete statement calls the object's destructor and frees it even if the object is referenced by some other places in the engine. Other references to the deleted object become stale and trying to access them results in a fatal error. Note that if you have a user-defined function delete() in an old script, this script will yield a parser error with the Zend Engine 2.0, since 'delete' is now a reserved word. ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 13:06 Message: Logged In: YES user_id=279065 This is easy to change in the PHPLIB code to fix, but anybody upgrading will find their existing applications which use the session delete method failing. Thus, we need to carefully schedule this change into the release cycle so that it is part of a major release, where users upgrading have a good expectation of having to modify their code to use the new PHPLIB. Documentation will also need to be changed in concert with this change. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=571314&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 17:57:44
|
Bugs item #605074, was opened at 2002-09-05 09:31 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=605074&group_id=31885 >Category: Interface (example) >Group: 7.2.x >Status: Pending >Resolution: Fixed Priority: 5 Submitted By: Nobody/Anonymous (nobody) >Assigned to: Chris Johnson (chaska) Summary: Error in viewsessions.php3 Initial Comment: $query = sprintf("delete from %s where name = '%s' and sid = '%s'", $sess->that->database_table, $sess->name, $v); must be $v not $k ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 12:57 Message: Logged In: YES user_id=279065 Fixed typo. Needs to be tested. ---------------------------------------------------------------------- Comment By: Dr Tarique Sani (tarique) Date: 2002-09-05 12:54 Message: Logged In: YES user_id=269695 Errr... I dont think this is a docs bug ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=605074&group_id=31885 |
|
From: <no...@so...> - 2002-09-25 17:52:27
|
Bugs item #610323, was opened at 2002-09-16 21:52 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=610323&group_id=31885 Category: OOH Forms Group: 7.2.x >Status: Closed >Resolution: Fixed Priority: 5 Submitted By: Nobody/Anonymous (nobody) >Assigned to: Chris Johnson (chaska) Summary: Typo in OOHForms.inc Initial Comment: I noticed a typo in function get_element, in oohforms.inc: About 20 lines into the function (ver 7.2d) appears the line: if (true == $falg_nametranslation) according to the earlier references, it looks like this should actually be: if (true == $flag_nametranslation) I'm not sure if this has been fixed in a later revision (and I'm a bit too busy to search the archives), but I thought you might like to know. ---------------------------------------------------------------------- >Comment By: Chris Johnson (chaska) Date: 2002-09-25 12:52 Message: Logged In: YES user_id=279065 This is already fixed in current CVS. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403611&aid=610323&group_id=31885 |
|
From: <no...@so...> - 2002-09-24 01:02:48
|
Patches item #613505, was opened at 2002-09-23 19:27 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Daniel Ward (fastcat) Assigned to: Nobody/Anonymous (nobody) Summary: Template: use include path for set_file Initial Comment: Allows the use of the include path rather than absolute or relative filenames in Template::load_file(). Use: Add the $use_inc_path class variable and replace Template(), set_file(), and load_file() methods with those in the attached template.inc.patch file below. Be sure to add your template directory to your include path. Example of use after patch: $pg = new Template("USE_INC_PATH"); $pg->set_file("filename.tpl"); filename.tpl only needs to be in your include path now not in current working directory. The same code will work in any directory this way. ---------------------------------------------------------------------- >Comment By: Daniel Ward (fastcat) Date: 2002-09-23 20:02 Message: Logged In: YES user_id=598737 Also, in my example for use after the patch the second line should read $pg->set_file("varname", "filename.tpl"); I'm gonna go get some rest now. :o) ---------------------------------------------------------------------- Comment By: Daniel Ward (fastcat) Date: 2002-09-23 19:49 Message: Logged In: YES user_id=598737 Oops! The new class variable, $use_inc_path, should not be set to anything in its declaration. It is set in the new constructor. So it should read var $use_inc_path; rather than var $use_inc_path = "."; Thats what I get for using copy and paste too much. :o) ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 |
|
From: <no...@so...> - 2002-09-24 00:49:22
|
Patches item #613505, was opened at 2002-09-23 19:27 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Daniel Ward (fastcat) Assigned to: Nobody/Anonymous (nobody) Summary: Template: use include path for set_file Initial Comment: Allows the use of the include path rather than absolute or relative filenames in Template::load_file(). Use: Add the $use_inc_path class variable and replace Template(), set_file(), and load_file() methods with those in the attached template.inc.patch file below. Be sure to add your template directory to your include path. Example of use after patch: $pg = new Template("USE_INC_PATH"); $pg->set_file("filename.tpl"); filename.tpl only needs to be in your include path now not in current working directory. The same code will work in any directory this way. ---------------------------------------------------------------------- >Comment By: Daniel Ward (fastcat) Date: 2002-09-23 19:49 Message: Logged In: YES user_id=598737 Oops! The new class variable, $use_inc_path, should not be set to anything in its declaration. It is set in the new constructor. So it should read var $use_inc_path; rather than var $use_inc_path = "."; Thats what I get for using copy and paste too much. :o) ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 |
|
From: <no...@so...> - 2002-09-24 00:27:38
|
Patches item #613505, was opened at 2002-09-23 19:27 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Daniel Ward (fastcat) Assigned to: Nobody/Anonymous (nobody) Summary: Template: use include path for set_file Initial Comment: Allows the use of the include path rather than absolute or relative filenames in Template::load_file(). Use: Add the $use_inc_path class variable and replace Template(), set_file(), and load_file() methods with those in the attached template.inc.patch file below. Be sure to add your template directory to your include path. Example of use after patch: $pg = new Template("USE_INC_PATH"); $pg->set_file("filename.tpl"); filename.tpl only needs to be in your include path now not in current working directory. The same code will work in any directory this way. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613505&group_id=31885 |
|
From: <no...@so...> - 2002-09-23 19:05:49
|
Patches item #613295, was opened at 2002-09-23 17:00 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: same as [ 612139 ], + phplib API compat Initial Comment: This is the same as patch [ 612139 ] by Joe Stewart. To it, are added the register(), is_registered() unregister() functions. Also is implemented the new (php 4.2.2) session.use_only_cookie, equivalent to phplib mode=cookie, fallback_mode=cookie. So by setting these two, thisi nterface to php4 session will behave as expected, that is use ONLY cookies for propagation. Notes: the phplib API for register() and unregister(), didn't return any value. Only is_registered() returns true/false. And so I put the session4 back in line with phplib, as 'unset' and $_SSESSION[var]=xxx do not return anything anyway in php language. These wrapper functions should permit to upgrade a phplib based application to use PHP4 native sessions instead (session4), and work unchanged on a setup either with register_globals On or Off. When this get enough tested, session4_custom.inc can be updated too. Gian ---------------------------------------------------------------------- >Comment By: Giancarlo Pinerolo (pingus) Date: 2002-09-23 19:05 Message: Logged In: YES user_id=163488 But now I found that these functions, even though the manual says they shouldn't be used with register_:globals=Off, do work with them Off. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 |
|
From: <no...@so...> - 2002-09-23 17:00:25
|
Patches item #613295, was opened at 2002-09-23 17:00 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Giancarlo Pinerolo (pingus) Assigned to: Nobody/Anonymous (nobody) Summary: same as [ 612139 ], + phplib API compat Initial Comment: This is the same as patch [ 612139 ] by Joe Stewart. To it, are added the register(), is_registered() unregister() functions. Also is implemented the new (php 4.2.2) session.use_only_cookie, equivalent to phplib mode=cookie, fallback_mode=cookie. So by setting these two, thisi nterface to php4 session will behave as expected, that is use ONLY cookies for propagation. Notes: the phplib API for register() and unregister(), didn't return any value. Only is_registered() returns true/false. And so I put the session4 back in line with phplib, as 'unset' and $_SSESSION[var]=xxx do not return anything anyway in php language. These wrapper functions should permit to upgrade a phplib based application to use PHP4 native sessions instead (session4), and work unchanged on a setup either with register_globals On or Off. When this get enough tested, session4_custom.inc can be updated too. Gian ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=613295&group_id=31885 |
|
From: <no...@so...> - 2002-09-20 18:08:22
|
Patches item #612139, was opened at 2002-09-20 09:46 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=612139&group_id=31885 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Joe Stewart (joestewart) Assigned to: Nobody/Anonymous (nobody) Summary: Session4_Custom w/reg. globals off Initial Comment: A patch to provide use of phplib Session4_Custom with register_globals off. NOTE: When using this patch all session variables are global. Patch performed on: session4_custom.inc,v 1.1 2002/01/05 15:47:37 ---------------------------------------------------------------------- >Comment By: Joe Stewart (joestewart) Date: 2002-09-20 13:08 Message: Logged In: YES user_id=77269 Amended files. Changes in Session4.inc as needed as per Maxim Derkachev explanation. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=403613&aid=612139&group_id=31885 |
115 messages has been excluded from this view by a project administrator.
