[pmwiki-users] AuthUser/mySQL Feature (prefer alternative) . . .

Patrick R. Michaud pmichaud at pobox.com
Thu Jan 12 07:13:02 CST 2006


On Thu, Jan 12, 2006 at 08:15:35AM +0100, Dominique Faure wrote:
> May we have also the handling of "htgroup" file as wiki usergroups
> definition to finalize the PmWiki/Apache security sync?

Yes, I think I can do that.

> BTW, authuser.php line 93 could be written as:
>     $fp = fopen(FmtPageName($f, $pagename), "r"); if (!$fp) continue;
> in order to handle variable/intermap definition replacement, no?

Yes, it probably can; I haven't done it that way because I'm
not entirely certain of any security ramifications that might
result.  (There probably aren't any, but I like to think it through
in situations like this since we're dealing closely with site
security.)

Pm




More information about the pmwiki-users mailing list