Re: [Phpwiki-talk] Re:Userids?

[Reini U. <ru...@x-...>]

Jeff Dairiki schrieb:
> How's this for an interim solution (until we get real user
> authentication, that is)?
> 
> Allow anyone to log in (via HTTP authentication,
> the same way the admin currently logs in) with any userid
> except the admin user, and any password.  

yes. but why not also the admin? 
the admin check is done later in user_auth.

other wiki's do it with simple userid cookies instead of auth.
setting up the db auth scheme is not that trivial. cookies are easier.

> This would be a trivial hack, and I believe would be maximally forward-compatible
> with future non bogo-authentication.
> I guess we don't want to allow people to set userid's which
> look like IP addresses or host names.
> 
> Perhaps we should only allow people to log in with with userid's
> which are WikiWords, so as to encourage userids to be the names
> of homepages?

good idea. count me pro.
-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/