[phplib] Multiple users using same login details. From: Jonathan Tullett (jtullett <email protected>)
Date: 06/29/01

Good evening,

I have been using phplib for the last six months or so, primarily the
template class but once or twice the auth classes too.

My question is with regards to multiple users using the same
username/password pair (and therefore(?) the same $sid) to access the site
at the same time.

Basically the company offers its subscriptions on a per company basis and
provides that company with a unique username and password to be used
across the range of sites. Currently all authentication is done using
basic auth, but I want to move to phplib auth (do I need to explain
why? ;o))

Is it possible to have many people from the same company (lets say, 10)
using the site at the same time, all logged in using the same username and
password without it causing problems with the sessions and their
individual expiries etc etc...

The documentation (which I have been trawling through tonight) states:
'And in Example_User, the user id of the authenticated user becomes the
session id in the active_sessions table. That is the reason why we
recommend md5(uniqid("abracadabra")) style uids.'

So based on this, im thinking that if all these users are logged in at the
same time then the session ids in the active table will all overwrite
eachother and thus fail.

Am I correct in my way of thinking? Can you think of any ways that I
would work this system (and issuing invididual usernames and passwords is
not possible!) would dynamically generating the sid based on the time or
something work in its place?

Thanks in advance for your time, and if none of this makes sense I
apologise, but I am very tired and in desperate need of sleep :o)

Cheers, 

--
Jonathan Tullett

 'The juvenile sea squirt wanders through the ocean searching for a
 suitable rock or hunk of coral to cling to and make its home for life.
 When it finds its spot and takes root, it doesn't need its brain any
 more...so it eats it. It's rather like getting tenure.' - Michael Scriven

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>