[pmwiki-users] error in .htpasswd - Auth

[Patrick Ogay]

I guess this must be the problem:
I created a user "pmichaud"  (with  
action=setuser?&user=pmichaud&passwd=pmichaud)
the user is o.k. .htpasswd

pmichaud can login now, but with the first users password
It's even worse  that *anybody*  can login who knows this  password.
It's even more strange, because now  I have changed my user to the 
second place, and still pmichaud can only login with this user....urgh...
(I don't like the idea to store the correct password here in the Group:-),

pw-file: (first attempt)
pogay:u6cLSILEk15aQ
vhcuser:NPtapYBNVvC02
vorstand:tWWn6kTmNE/6o
pmichaud:WLul3vR1PMYlQ

pw-file (second attempt)
pmwiki:5OV8XuG1lKdQU
pogay:u6cLSILEk15aQ
vhcuser:NPtapYBNVvC02
vorstand:tWWn6kTmNE/6o
pmichaud:WLul3vR1PMYlQ


farmconfig:------------------------------------------------------------------------------------------------
#  funktioniert, wird dann z.T. in pw-file und lokal ausgelagert

#   $AuthUserHtPasswd     = "$FarmD/local/.htpasswd";
    $AuthUser['htpasswd'] = "/var/www/etc/.passwd";

 
###  pmwiki users
#    $AuthUser['pogay']    = '$1$W32gNGnz$qqRtTf.gwGj8KgFcrS9Ow/'; 
#    $Authuser['nic']      = '$1$W32gNGnz$qqRtTf.gwGj8KgFcrS9Ow/';
#    $Authuser['pat']      = '$1$W32gNGnz$qqRtTf.gwGj8KgFcrS9Ow/'; 
#    $AuthUser['pmwikif']  = '$1$yiQu4aL7$eQtLXJ5sJSuRQDUkHJrtK0';
#    $AuthUser['pmwiki2']  = crypt('pmwiki2');
#    $AuthUser['pmwiki3']  = '$1$W32gNGnz$qqRtTf.gwGj8KgFcrS9Ow/';

### apache users
#    $AuthUser['vhcusez']  = "$FarmD/local/.htpasswd";
#   $AuthUser['pogaz']    = "$FarmD/local/.htpasswd";
#    $AuthUser['vhcuser']  = "$FarmD/local/.htpasswd";
#    $AuthUser['bluguser'] = "$FarmD/local/.htpasswd";


    include_once('local/config.php');          # load per-field settings

    $DefaultPasswords['read']   = 'id:*'; /*alle die User haben */
#   $DefaultPasswords['read']   = 'id:pogay,nic';
    $DefaultPasswords['edit']   = 'id:pogay,nic';
    $DefaultPasswords['upload'] = 'id:pogay,nic';
    include_once("$FarmD/scripts/authuser.php");   /* User basierende 
Authenfification */

       /* Assign Logfile+ activate */

## Addons/User Actions
##adds action=setuser&user=user&passwd=passwd
## uses php "system" to execute a shellscript  in usr/local/bib
global $HandleActions;
SDV($HandleActions['setuser'], 'setUser');
function setUser($pagename) {
 echo "setuser".$_GET[user].$_GET[passwd];
 if ($_GET[user] && $_GET[passwd]){
   $cmd = "_htpasswd ".$_GET[user]." ".$_GET[passwd];
   echo "=$cmd=";
   system($cmd, $result);  
   /* $return = `cmd`; */
   echo "result=$result/";
  }
 else { /* alles listen */
  system("_htpasswd",$result);
  echo "result=$result/";
  echo "Lines<br>\n";
  reset($lines);
  while(list($k, $v) = each($lines)):
    echo "k=$k v=$v<br>\n";
  endwhile;

 }
 
}