Pear Auth allows logins from all auth pages?

From: Date: Fri, 16 Jan 2004 00:14:59 +0000
Subject: Pear Auth allows logins from all auth pages?
Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-25090@lists.php.net to get a copy of this message
Recently I've been using the Pear Auth module on my website. I have a central login page (login.php) that processes logins and places some information in a log. But looking at the Auth/Auth.php file it looks like any page that calls auth ->start() would also process login information. This would effectively bypass the logging (though the authentication would still work normally). Would an acceptible fix be: function start() {
       $this->assignData();
       @session_start();
       if (!$this->checkAuth() && $this->showLogin) {
           $this->login();
       }
} (This checks if showLogin is set before attempting the log in). Thanks, Matt

« previous php.pear.dev (#25090) next »