[phplib] page.inc/auth.inc interaction From: Marc Rossi (marcr <email protected>)
Date: 06/27/00

Hi all. I've run into a situation I can't seem to figure out. Any help
would be appreciated.

A user is visiting a page with auth "nobody" and clicks on a login button.
This reinvokes the current page with the "login" var set. This "login" var
causes $auth->login_if() to be executed which destroys the current auth,
sets $auth->nobody to false, and starts the authentication process all
over with a call to $auth->start(). While at the login page the user
jumps to another site (perhaps by typing in a new URL). When the user
eventually returns to the site (to a page that allows "nobody") they
are prompted with the login screen instead of being allowed default
access. This is where I want the user to be allowed access as the user
"nobody" instead of being prompted with an unexpected login screen.

The things I know (or think I know):
- This happens because the session cookie in the user's points to a session
containing the auth created when at the previous login screen.
- I could put a "cancel login" button on the login page that would do the
trick.
- Maybe I'm being a bit picky here.

Is there a way around this without hacking the page.inc/auth.inc interaction?

Thanks for any info,
Marc

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>