[pmwiki-users] AuthUser/mySQL Feature (prefer alternative) . . .
Patrick R. Michaud
pmichaud at pobox.com
Thu Jan 12 07:13:02 CST 2006
On Thu, Jan 12, 2006 at 08:15:35AM +0100, Dominique Faure wrote:
> May we have also the handling of "htgroup" file as wiki usergroups
> definition to finalize the PmWiki/Apache security sync?
Yes, I think I can do that.
> BTW, authuser.php line 93 could be written as:
> $fp = fopen(FmtPageName($f, $pagename), "r"); if (!$fp) continue;
> in order to handle variable/intermap definition replacement, no?
Yes, it probably can; I haven't done it that way because I'm
not entirely certain of any security ramifications that might
result. (There probably aren't any, but I like to think it through
in situations like this since we're dealing closely with site
security.)
Pm
More information about the pmwiki-users
mailing list