[ANNOUNCEMENT] Auth-1.3.0r4 (beta) Released.

The new PEAR package Auth-1.3.0r4 (beta) has been released at http://pear.php.net/. Release notes ------------- This release fixes a security issue that allows an attacker to perform injection attacks against the underlying storage containers. Upgrading is strongly recommended if you are using beta releases of the Auth package. * Improved parameter validation in the DB and LPAP containers. (Patch provided by Matthew Van Gundy.) * Fixed Bug #3101: Wrong variable names in Auth/Container/File.php (mike) * renamed supportsChallengeResponce() to supportsChallengeResponse() in the DB container (quipo) * Fixed Bug #4347: recognition of DB and MDB objects passed as dsn * Fixed Bug #6324: updated MDB2 container * Fixed Bug #5174: "Only variable references should be returned by reference" bug in _factory() * Fixed Bug #2446: english language typos. This results in a BC break for any custom containers that have implemented supportsChallengeResponce(). Also all containers already supportsChallengeResponse() instead of supportsChallengeResponce() and therefore the call in Auth_Frontend_Html always called the default implementation and not the container implementation. Package Info ------------- The PEAR::Auth package provides methods for creating an authentication system using PHP. Currently it supports the following storage containers to read/write the login data: * All databases supported by the PEAR database layer * All databases supported by the MDB database layer * All databases supported by the MDB2 database layer * Plaintext files * LDAP servers * POP3 servers * IMAP servers * vpopmail accounts * RADIUS * SAMBA password files * SOAP Related Links ------------- Package home: http://pear.php.net/package/Auth Changelog: http://pear.php.net/package/Auth/download/1.3.0r4 Download: http://pear.php.net/get/Auth-1.3.0r4.tgz Authors ------------- Martin Jansen <mj@php.net> (lead) James E. Flemer <jflemer@alum.rpi.edu> (developer) Yavor Shahpasov <yavo@siava.org> (lead)