[pmwiki-users] Custom Action and Authentication

[Petko Yotov]

Petko Yotov writes:

> Crisses writes:
>> « HTML content follows »
>> Hi,
>>
>> I've spent a day trying to fix this, so I have to figure that the  
>> documentation or myself (or both) aren't up to the task...
>>
>> I have an array of (xml scalar) variables being passed to PmWiki via ? 
>> action=xmlrpc, including the author & password.  All the xmlrpc functions  
>> are in their own classes, including extracting the password from the xml  
>> data.  It works just fine, can dump the vars and all is (apparently?) in  
>> order.
>>
>> I'm using basic PmWiki passwording.  I've set up the password to be passed  
>> to $_POST['authpw'] and the username to go into $_POST['authid'] and  
>> (global) $Author.
>
> If you use authuser.php you need set the $_POST['authid'] and  
> $_POST['authpw'] values before including authuser.php. And to include  
> authuser.php before calling RetrieveAuthPage().

Or, you should be able to call AuthUserId($pagename, $user, $pass) after  
including authuser.php. No need to set $_POST values.


> If you use basic PmWiki passwording (shared password) you need to set  
> $_POST['authpw'] before calling RetrieveAuthPage().

Or, you should be able to call SessionAuth($pagename, $pass); before  
calling RetrieveAuthPage(), no need to set $_POST['authpw'].

After you have authenticated, just get and return the PHPSESSID cookie when  
you access the other pages, no need to repost user/pass every time.

Petko