phpslash-commit

[Joe S. <joe...@us...>]

Update of /cvsroot/phpslash/phpslash-ft/class
In directory usw-pr-cvs1:/tmp/cvs-serv26742a/phpslash-ft/class

Modified Files:
	slashAuthCR.class 
Log Message:
register_globals off and session4 tweaks

Index: slashAuthCR.class
===================================================================
RCS file: /cvsroot/phpslash/phpslash-ft/class/slashAuthCR.class,v
retrieving revision 1.19
retrieving revision 1.20
diff -C2 -d -r1.19 -r1.20
*** slashAuthCR.class	24 Sep 2002 21:17:50 -0000	1.19
--- slashAuthCR.class	3 Oct 2002 21:20:25 -0000	1.20
***************
*** 24,28 ****
     var $psl;
  
!    function slashAuth() {
     
        global $_PSL, $HTTP_GET_VARS;
--- 24,28 ----
     var $psl;
  
!    function start() {
     
        global $_PSL, $HTTP_GET_VARS;
***************
*** 32,43 ****
           if( !empty($_PSL['authmode'])) {
              $this->mode = $_PSL['authmode'];
! 	 } else {
! 	    $this->mode='reg';
! 	 }
        } else {
           $this->mode='log';
        }
  
! 
     }
  
--- 32,43 ----
           if( !empty($_PSL['authmode'])) {
              $this->mode = $_PSL['authmode'];
!          } else {
!             $this->mode='reg';
!          }
        } else {
           $this->mode='log';
        }
  
!       Auth::start();
     }
  
***************
*** 130,134 ****
  	         }
  	      }
!       } else if ($this->nobody) {       
           $uid = $this->auth["uid"] = "nobody";
  	      $aid = Author::getId($uid);
--- 130,134 ----
  	         }
  	      }
! /*      } else if ($this->nobody) {       
           $uid = $this->auth["uid"] = "nobody";
  	      $aid = Author::getId($uid);
***************
*** 137,141 ****
           $this->auth["email"] = '';
  	      return $uid;
!       }
  
     }
--- 137,141 ----
           $this->auth["email"] = '';
  	      return $uid;
!   */    }
  
     }
***************
*** 158,164 ****
        } else if ($this->nobody) {       ##  provides for "default login cancel"
           $uid = $this->auth["uid"] = "nobody";
! 	      $aid = Author::getId($uid);
  	      $this->auth["perm"]  = $this->get_userperms($aid);
! 	      return $uid;
        }
  
--- 158,164 ----
        } else if ($this->nobody) {       ##  provides for "default login cancel"
           $uid = $this->auth["uid"] = "nobody";
! /*	      $aid = Author::getId($uid);
  	      $this->auth["perm"]  = $this->get_userperms($aid);
! */	      return $uid;
        }
  
***************
*** 298,312 ****
     function auth_doregister() {
  
!       global $username,$pass1, $pass2, $realname, $email, $mode;
!       global $password, $url, $quote, $seclev, $HTTP_POST_VARS;
  
        # the login form will save the username
!       $this->auth["uname"]    = $username;
!       $this->auth["realname"] = $realname;
!       $this->auth["email"]    = $email;
!       $this->auth["url"]      = $url;
!       $this->auth["quote"]    = $quote;
!       $this->auth["seclev"]   = $seclev;
  
  
        if ($username == "" || $pass1 == ""){  
--- 298,313 ----
     function auth_doregister() {
  
!       global $HTTP_POST_VARS;
  
        # the login form will save the username
!       $this->auth["uname"]    = $username = $HTTP_POST_VARS['username'];
!       $this->auth["realname"] = $realname = $HTTP_POST_VARS['realname'];
!       $this->auth["email"]    = $email = $HTTP_POST_VARS['email'];
!       $this->auth["url"]      = $url = $HTTP_POST_VARS['url'];
!       $this->auth["quote"]    = $quote = $HTTP_POST_VARS['quote'];
!       $this->auth["seclev"]   = $seclev = $HTTP_POST_VARS['seclev'];
  
+       $pass1 = $HTTP_POST_VARS['pass1'];
+       $pass2 = $HTTP_POST_VARS['pass2'];
  
        if ($username == "" || $pass1 == ""){