Hi,
I used to know how to do this. Read it in the list archive but cannot
find it again...
I simply want to achieve that un-authorized users can store stuff under
a particular topic. So I want effectively to switch ot the id of the
owner of said topic.
I believe it is wrong to simply do
$midgard->user = id;
(would that work, BTW?)
I know that I can use
mgd_auth_midgard(username, password);
to change the id of the current user. However:
Q1: There was a way to supress sending a cookie. How again could that be
done?
Q2: How to switch back to non-authorized mode?
Background
----------
I am creating a page where users can sign up for a mailing list like
thing for announcements (page update, news,...). I follow a low security
straightforward approach:
1. The yet anonymous user fills in his email address and a desired
password in a form and hits submit. The code of the processing page
stores this two parts plus an on-the-fly generated random number in a
temporary article.
2. The processing page uses mgd_create_mail to send back a
majordomo-like answer saying that someone, possibly himslef, asked for
his email to be added to the list. In that mail, he finds a URL like
[EMAIL PROTECTED]/123456.html
where 123456 is the random number which was created earlier. He clicks
on that URL which will be processed by the active page
myserver/process-requests/
3. Only if the email address and the number match, he will be added and
a corresponding person will be created for further usage. The person
will then be added to a certain group and the temporary article will be
deleted. In other worth, confirmation is done by requesting a particlar
page (probably with a time limit).
I know that this is anything but secure, but security is not a big issue
for my project.
Thanks in advance,
Frank
--
Dr Frank Boehme | Email: [EMAIL PROTECTED]
National University of Ireland, Cork | phone: +353-21-903163
Dept of Computer Science | fax: +353-21-903113
Cork, Ireland |
--
This is The Midgard Project's mailing list. For more information,
please visit the project's web site at http://www.midgard-project.org
To unsubscribe the list, send an empty email message to address
[EMAIL PROTECTED]
