<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>Re: [pmwiki-users] PHP 5.3 auth issues [was:
Reinstall]</title></head><body>
<div>Rogutòs</div>
<div><br></div>
<div><br></div>
<div>No joy for clean install.</div>
<div>I did use my config.php file from other, but edited it. There are
no cookbook lines in it, but it doesn't mean I didn't screw something
else up. I can send you the file if you want.</div>
<div><br></div>
<div>I've been over security docs and suggestions for last hour or so
- don't know if I really understand it yet but getting there</div>
<div><br></div>
<div>On authuser it says:</div>
<div><br></div>
<div>"This site appears to have the authuser extensions enabled.
"</div>
<div>So that part is not broken.</div>
<div><br></div>
<div>After I set a name and password there, such as</div>
<div><br></div>
<div>paul: (:encrypt myPassword:)</div>
<div><br></div>
<div>should I be able to edit the homepage with this login?</div>
<div>Or do I have to set group permissions or somewhere?</div>
<div><br></div>
<div>Thanks for your help,</div>
<div><br></div>
<div>paul</div>
<div><br></div>
<div><br></div>
<div><br></div>
<div><br></div>
<div><br></div>
<div><br></div>
<div><br></div>
<blockquote type="cite" cite>Paul Badger (2009-10-04 22:46):<br>
> These lines below seem to have fixed the upload problem with php
5.3.0.<br>
><br>
> # temprorary workaround for PHP 5.3 login issues<br>
> # pmwiki.org/wiki/PITS/01141<br>
> $_REQUEST[session_name()]=1;<br>
><br>
> I did have to set permissions on the upload folders at 777
though.<br>
><br>
> Any opinions on whether this represents a security issue?<br>
<br>
The workaround line shouldn't have any security implications. At
least<br>
not more than running PHP 5.3.0 before the bugs are explained and
fixed<br>
(remember that using workarounds is far from fixing).<br>
<br>
Making uploads/ world-writable is what most people do with PmWiki
(and<br>
other webapps that need to write files). Security of this depends<br>
on your server's configuration.<br>
<br>
> Also authuser functionality now seems to be broken now. ie
defined<br>
> passwords no longer work.<br>
> Would this have been expected?<br>
<br>
No, it works here. Could you test whether AuthUser works with a
fresh<br>
install, without any recipes (you can simply unpack PmWiki into<br>
a separate directory, make wiki.d/ world-writable, enable authuser
in<br>
config.php and copy your password from SiteAdmin.AuthUser)?<br>
<br>
--</blockquote>
<blockquote type="cite" cite>-- Rogutòs Sparnuotos<br>
<br>
_______________________________________________<br>
pmwiki-users mailing list<br>
pmwiki-users@pmichaud.com<br>
http://www.pmichaud.com/mailman/listinfo/pmwiki-users</blockquote>
<div><br></div>
</body>
</html>