Pear Auth allows logins from all auth pages?
| From: | Matt Eaton | Date: | Fri, 16 Jan 2004 00:14:59 +0000 |
| Subject: | Pear Auth allows logins from all auth pages? | ||
| Groups: | php.pear.dev | ||
| Request: | Send a blank email to pear-dev+get-25090@lists.php.net to get a copy of this message | ||
Recently I've been using the Pear Auth module on my website. I have a central login page (login.php) that processes logins and places some information in a log. But looking at the Auth/Auth.php file it looks like any page that calls auth ->start() would also process login information. This would effectively bypass the logging (though the authentication would still work normally).
Would an acceptible fix be:
function start()
{
$this->assignData();
@session_start();
if (!$this->checkAuth() && $this->showLogin) {
$this->login();
}
}
(This checks if showLogin is set before attempting the log in).
Thanks,
Matt