RE: [PHPLIB] Re: From: Howard Ha (howardh <email protected>)
Date: 03/17/00

There is a second problem:

Once you force authorisation, it is no longer possible to use "default" auth
because the sessions is frozen in LOGIN mode.

You literally have to modify the auth.inc file itself to change this
behaviour.

Howard

> -----Original Message-----
> From: phplib-owner <email protected>
> [mailto:phplib-owner <email protected>]On Behalf Of Philip Strnad
> Sent: Friday, March 17, 2000 10:14 AM
> To: Max A. Derkachev
> Cc: phplib maillist
> Subject: [PHPLIB] Re:
>
>
> The problem is that once a user hits a page on your site that uses
> default authentication, the auth class associated with that user's
> session id will always be the default authentication class. You can't
> "upgrade" the user's authentication. For more info see this thread:
>
> http://marc.theaimsgroup.com/?l=phplib&m=94999794302388&w=2
>
> So basically you have to call $auth->login_if($auth->auth["uid"] ==
> nobody) on all the pages that should force the user to login.
>
> -Philip
>
>
>
> "Max A. Derkachev" wrote:
> >
> > Hi.
> > Just discovered that if i use the default auth on one page, access it,
> > then go to the page that uses standard auth with user and password, the
> > login form does not appear, and page is accessed despite of the
> > standard auth class in auth argument of the page_open().
> > If I tried to access the standard auth page first, and the login form
> > appeared once, but I did not log in, tried to access the default auth
> > page then, the form continues to appear, so I could not log in as
> > nobody, as intended (as the default auth class should work).
> > How could I set up my pages, so the auth class would be redefined to
> > the value mentioned in page_open(), and the login form would appear
> > where it intended to be, and miss if I've not logged in and
> > default auth for the page is defined?
> >
> > --
> > Best regards,
> > Max A. Derkachev
> >
> > -
> > PHP3 Base Library Mailing List. Send messages to
> <phplib <email protected>>.
> > To unsubscribe, send "unsubscribe" to
> <phplib-request <email protected>> in
> > the body, not the subject, of your message.
> -
> PHP3 Base Library Mailing List. Send messages to <phplib <email protected>>.
> To unsubscribe, send "unsubscribe" to <phplib-request <email protected>> in
> the body, not the subject, of your message.
>

-
PHP3 Base Library Mailing List. Send messages to <phplib <email protected>>.
To unsubscribe, send "unsubscribe" to <phplib-request <email protected>> in
the body, not the subject, of your message.